# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Nov 9 2018 10:32:43 # Log Creation Date: 16.11.2018 14:17:07.912 Process: id = "1" image_name = "cerber ransomware source.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cerber ransomware source.exe" page_root = "0x5110f000" os_pid = "0x6d8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cerber Ransomware Source.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4 start_va = 0xb0000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 5 start_va = 0x11b0000 end_va = 0x11bffff entry_point = 0x11b0000 region_type = mapped_file name = "cerber ransomware source.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cerber Ransomware Source.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cerber ransomware source.exe") Region: id = 6 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 7 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 8 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 9 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 10 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 11 start_va = 0x7fffffd8000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 12 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 145 start_va = 0x270000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 146 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 147 start_va = 0x7fef46b0000 end_va = 0x7fef471efff entry_point = 0x7fef46b0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 148 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 149 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 150 start_va = 0x80000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 151 start_va = 0x1b0000 end_va = 0x216fff entry_point = 0x1b0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 152 start_va = 0x2f0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 153 start_va = 0x5d0000 end_va = 0x64ffff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 154 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 155 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 156 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 157 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 158 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 159 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 160 start_va = 0x450000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 161 start_va = 0x460000 end_va = 0x55ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 162 start_va = 0x7fef4400000 end_va = 0x7fef4498fff entry_point = 0x7fef4400000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 163 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 164 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 165 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 166 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 167 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 168 start_va = 0x650000 end_va = 0x7d7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 169 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 170 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 171 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 172 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 173 start_va = 0x7e0000 end_va = 0x960fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 174 start_va = 0x11c0000 end_va = 0x25bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011c0000" filename = "" Region: id = 175 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 176 start_va = 0x7fef3970000 end_va = 0x7fef3a66fff entry_point = 0x7fef3970000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 177 start_va = 0x7fef3a70000 end_va = 0x7fef43f6fff entry_point = 0x7fef3a70000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 178 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 179 start_va = 0x70000 end_va = 0x7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 180 start_va = 0x90000 end_va = 0x9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 181 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 182 start_va = 0x220000 end_va = 0x220fff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 183 start_va = 0x970000 end_va = 0xa70fff entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 184 start_va = 0xaa0000 end_va = 0xb1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 185 start_va = 0xb20000 end_va = 0xc1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 186 start_va = 0xc90000 end_va = 0xd0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 187 start_va = 0xd10000 end_va = 0x107ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 188 start_va = 0x1080000 end_va = 0x117ffff entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 189 start_va = 0x25c0000 end_va = 0x1a5bffff entry_point = 0x0 region_type = private name = "private_0x00000000025c0000" filename = "" Region: id = 190 start_va = 0x1a720000 end_va = 0x1a81ffff entry_point = 0x0 region_type = private name = "private_0x000000001a720000" filename = "" Region: id = 191 start_va = 0x1a830000 end_va = 0x1a92ffff entry_point = 0x0 region_type = private name = "private_0x000000001a830000" filename = "" Region: id = 192 start_va = 0x1a930000 end_va = 0x1abfefff entry_point = 0x1a930000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 193 start_va = 0x1ad30000 end_va = 0x1ae2ffff entry_point = 0x0 region_type = private name = "private_0x000000001ad30000" filename = "" Region: id = 194 start_va = 0x7fe94310000 end_va = 0x7fe9431ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94310000" filename = "" Region: id = 195 start_va = 0x7fe94320000 end_va = 0x7fe9432ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94320000" filename = "" Region: id = 196 start_va = 0x7fe94330000 end_va = 0x7fe943bffff entry_point = 0x0 region_type = private name = "private_0x000007fe94330000" filename = "" Region: id = 197 start_va = 0x7fe943c0000 end_va = 0x7fe9442ffff entry_point = 0x0 region_type = private name = "private_0x000007fe943c0000" filename = "" Region: id = 198 start_va = 0x7fef24a0000 end_va = 0x7fef3968fff entry_point = 0x7fef24a0000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\70690ed034c632a010f791ea65e40064\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\70690ed034c632a010f791ea65e40064\\mscorlib.ni.dll") Region: id = 199 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 200 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 201 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 202 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 203 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 204 start_va = 0x1a5c0000 end_va = 0x1a63cfff entry_point = 0x1a5c0000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 205 start_va = 0x1a5c0000 end_va = 0x1a63cfff entry_point = 0x1a5c0000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 206 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 207 start_va = 0x7fefbf10000 end_va = 0x7fefbf65fff entry_point = 0x7fefbf10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 208 start_va = 0x1a5c0000 end_va = 0x1a65ffff entry_point = 0x0 region_type = private name = "private_0x000000001a5c0000" filename = "" Region: id = 209 start_va = 0x1ac00000 end_va = 0x1acdefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ac00000" filename = "" Region: id = 210 start_va = 0x7fe94430000 end_va = 0x7fe9446ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94430000" filename = "" Region: id = 211 start_va = 0x7fe94470000 end_va = 0x7fe9447ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94470000" filename = "" Region: id = 212 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 213 start_va = 0x7fffff10000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 214 start_va = 0x7fef2390000 end_va = 0x7fef2497fff entry_point = 0x7fef2390000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 215 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 216 start_va = 0x230000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 217 start_va = 0x7fef06a0000 end_va = 0x7fef157ffff entry_point = 0x7fef06a0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\6e89f5768c30e6d5cc74a6b198f437ce\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\6e89f5768c30e6d5cc74a6b198f437ce\\system.windows.forms.ni.dll") Region: id = 218 start_va = 0x7fef1580000 end_va = 0x7fef1769fff entry_point = 0x7fef1580000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\839ea0590195c34c0b0054db5a9c3513\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\839ea0590195c34c0b0054db5a9c3513\\system.drawing.ni.dll") Region: id = 219 start_va = 0x7fef1770000 end_va = 0x7fef2382fff entry_point = 0x7fef1770000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\76e0ae2162ace0d6430ce89ffdf32afa\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\76e0ae2162ace0d6430ce89ffdf32afa\\system.ni.dll") Region: id = 220 start_va = 0x240000 end_va = 0x241fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 221 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 222 start_va = 0x1a660000 end_va = 0x1a6fafff entry_point = 0x1a660000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 223 start_va = 0x1a660000 end_va = 0x1a6fafff entry_point = 0x1a660000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 224 start_va = 0x7fef0600000 end_va = 0x7fef069ffff entry_point = 0x7fef0600000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 225 start_va = 0x1ae30000 end_va = 0x1b01ffff entry_point = 0x0 region_type = private name = "private_0x000000001ae30000" filename = "" Region: id = 226 start_va = 0x1ae30000 end_va = 0x1af2ffff entry_point = 0x0 region_type = private name = "private_0x000000001ae30000" filename = "" Region: id = 227 start_va = 0x1b010000 end_va = 0x1b01ffff entry_point = 0x0 region_type = private name = "private_0x000000001b010000" filename = "" Region: id = 228 start_va = 0x1b020000 end_va = 0x1b20ffff entry_point = 0x1b020000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 229 start_va = 0x1b020000 end_va = 0x1b20ffff entry_point = 0x1b020000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 230 start_va = 0x7fefc0f0000 end_va = 0x7fefc2e3fff entry_point = 0x7fefc0f0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 231 start_va = 0x250000 end_va = 0x250fff entry_point = 0x250000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 232 start_va = 0x260000 end_va = 0x261fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 233 start_va = 0x1af90000 end_va = 0x1b00ffff entry_point = 0x0 region_type = private name = "private_0x000000001af90000" filename = "" Region: id = 234 start_va = 0x7fef8f00000 end_va = 0x7fef8f15fff entry_point = 0x7fef8f00000 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 235 start_va = 0x1b020000 end_va = 0x1b2f1fff entry_point = 0x1b020000 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Region: id = 236 start_va = 0x7fefbcf0000 end_va = 0x7fefbf04fff entry_point = 0x7fefbcf0000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 237 start_va = 0x1b300000 end_va = 0x1b3effff entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 238 start_va = 0x3f0000 end_va = 0x40afff entry_point = 0x3f0000 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat") Region: id = 239 start_va = 0x1b550000 end_va = 0x1b64ffff entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 240 start_va = 0x7ffffefe000 end_va = 0x7ffffefffff entry_point = 0x0 region_type = private name = "private_0x000007ffffefe000" filename = "" Region: id = 241 start_va = 0x1b3f0000 end_va = 0x1b4effff entry_point = 0x0 region_type = private name = "private_0x000000001b3f0000" filename = "" Region: id = 242 start_va = 0x1a660000 end_va = 0x1a6fffff entry_point = 0x1a660000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 243 start_va = 0x1a660000 end_va = 0x1a6fffff entry_point = 0x1a660000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 244 start_va = 0x1a660000 end_va = 0x1a70afff entry_point = 0x1a660000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 245 start_va = 0x1a660000 end_va = 0x1a70afff entry_point = 0x1a660000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 246 start_va = 0x1b650000 end_va = 0x1caf8fff entry_point = 0x1b650000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 247 start_va = 0x1b650000 end_va = 0x1caf8fff entry_point = 0x1b650000 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 248 start_va = 0x1b650000 end_va = 0x1cb12fff entry_point = 0x1b650000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 249 start_va = 0x1b650000 end_va = 0x1cb12fff entry_point = 0x1b650000 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 250 start_va = 0x1cb20000 end_va = 0x1cd1ffff entry_point = 0x0 region_type = private name = "private_0x000000001cb20000" filename = "" Region: id = 251 start_va = 0x1b650000 end_va = 0x1ba72fff entry_point = 0x1b650000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 252 start_va = 0x1b650000 end_va = 0x1ba72fff entry_point = 0x1b650000 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 253 start_va = 0x1a660000 end_va = 0x1a6defff entry_point = 0x1a660000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 254 start_va = 0x1a660000 end_va = 0x1a6defff entry_point = 0x1a660000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 255 start_va = 0x7fe94480000 end_va = 0x7fe9448ffff entry_point = 0x0 region_type = private name = "private_0x000007fe94480000" filename = "" Region: id = 256 start_va = 0x1b650000 end_va = 0x1b81ffff entry_point = 0x0 region_type = private name = "private_0x000000001b650000" filename = "" Region: id = 257 start_va = 0x1b820000 end_va = 0x1c14ffff entry_point = 0x1b820000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 258 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 259 start_va = 0x7fefbae0000 end_va = 0x7fefbaf7fff entry_point = 0x7fefbae0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 260 start_va = 0x3f0000 end_va = 0x3f6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 261 start_va = 0x400000 end_va = 0x401fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 262 start_va = 0x1c150000 end_va = 0x1c542fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001c150000" filename = "" Region: id = 263 start_va = 0x410000 end_va = 0x420fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 264 start_va = 0x430000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 265 start_va = 0x430000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 266 start_va = 0x440000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 267 start_va = 0x430000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 268 start_va = 0x440000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 269 start_va = 0x560000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 270 start_va = 0x7feefc70000 end_va = 0x7fef05f5fff entry_point = 0x7feefc70000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\0b543c6391a29ab6773dc4ad0da611f2\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\0b543c6391a29ab6773dc4ad0da611f2\\system.core.ni.dll") Region: id = 271 start_va = 0x570000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 272 start_va = 0x580000 end_va = 0x58ffff entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 273 start_va = 0x590000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 274 start_va = 0x5a0000 end_va = 0x5affff entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 275 start_va = 0x5b0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 276 start_va = 0x5c0000 end_va = 0x5cffff entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 277 start_va = 0xa80000 end_va = 0xa8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a80000" filename = "" Region: id = 278 start_va = 0xa90000 end_va = 0xa9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a90000" filename = "" Region: id = 279 start_va = 0xc20000 end_va = 0xc2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 280 start_va = 0xc30000 end_va = 0xc3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 281 start_va = 0xc40000 end_va = 0xc4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 282 start_va = 0xc50000 end_va = 0xc6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 283 start_va = 0x1180000 end_va = 0x11affff entry_point = 0x0 region_type = private name = "private_0x0000000001180000" filename = "" Region: id = 284 start_va = 0xc70000 end_va = 0xc8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 285 start_va = 0x1a5c0000 end_va = 0x1a5cffff entry_point = 0x0 region_type = private name = "private_0x000000001a5c0000" filename = "" Region: id = 286 start_va = 0x1a5e0000 end_va = 0x1a65ffff entry_point = 0x0 region_type = private name = "private_0x000000001a5e0000" filename = "" Region: id = 287 start_va = 0x430000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 288 start_va = 0x440000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 289 start_va = 0x560000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 290 start_va = 0x570000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 291 start_va = 0x580000 end_va = 0x58ffff entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 292 start_va = 0x430000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 293 start_va = 0x440000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 294 start_va = 0x430000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 295 start_va = 0x560000 end_va = 0x5c1fff entry_point = 0x560000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorrc.dll") Region: id = 296 start_va = 0x430000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 297 start_va = 0x440000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 298 start_va = 0xa80000 end_va = 0xa8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a80000" filename = "" Region: id = 299 start_va = 0x430000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 300 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 301 start_va = 0xc20000 end_va = 0xc64fff entry_point = 0xc20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 302 start_va = 0xc20000 end_va = 0xc64fff entry_point = 0xc20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 303 start_va = 0xc20000 end_va = 0xc64fff entry_point = 0xc20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 304 start_va = 0xc20000 end_va = 0xc64fff entry_point = 0xc20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 305 start_va = 0xc20000 end_va = 0xc64fff entry_point = 0xc20000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 306 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 307 start_va = 0x7fefd020000 end_va = 0x7fefd041fff entry_point = 0x7fefd020000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 310 start_va = 0x1b650000 end_va = 0x1b74ffff entry_point = 0x0 region_type = private name = "private_0x000000001b650000" filename = "" Region: id = 311 start_va = 0x1b7a0000 end_va = 0x1b81ffff entry_point = 0x0 region_type = private name = "private_0x000000001b7a0000" filename = "" Region: id = 312 start_va = 0x1c5d0000 end_va = 0x1c6cffff entry_point = 0x0 region_type = private name = "private_0x000000001c5d0000" filename = "" Region: id = 313 start_va = 0x7ffffefa000 end_va = 0x7ffffefbfff entry_point = 0x0 region_type = private name = "private_0x000007ffffefa000" filename = "" Region: id = 314 start_va = 0x7ffffefc000 end_va = 0x7ffffefdfff entry_point = 0x0 region_type = private name = "private_0x000007ffffefc000" filename = "" Thread: id = 1 os_tid = 0x240 [0041.267] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0048.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x1ae300, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0048.502] IsAppThemed () returned 0x1 [0048.521] CoTaskMemAlloc (cb=0xf0) returned 0x10a05b0 [0048.521] CreateActCtxA (pActCtx=0x1ae8d0) returned 0x1085ea8 [0048.626] CoTaskMemFree (pv=0x10a05b0) [0048.720] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc13a [0048.720] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc13c [0048.748] GetUserNameW (in: lpBuffer=0x1ae710, pcbBuffer=0x1aea38 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x1aea38) returned 1 [0048.921] GetComputerNameW (in: lpBuffer=0x1ae710, nSize=0x1aea38 | out: lpBuffer="XDUWTFONO", nSize=0x1aea38) returned 1 [0049.057] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0049.777] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fef0600000 [0049.804] AdjustWindowRectEx (in: lpRect=0x1ae970, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x1ae970) returned 1 [0049.810] GetCurrentProcess () returned 0xffffffffffffffff [0049.810] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1ae780, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ae780*=0x1e0) returned 1 [0049.847] GetCurrentActCtx (in: lphActCtx=0x1ae670 | out: lphActCtx=0x1ae670*=0x0) returned 1 [0049.847] ActivateActCtx (in: hActCtx=0x1085ea8, lpCookie=0x1ae6b0 | out: hActCtx=0x1085ea8, lpCookie=0x1ae6b0) returned 1 [0049.847] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0050.864] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fefc0f0000 [0050.883] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77450000 [0050.884] GetProcAddress (hModule=0x77450000, lpProcName="DefWindowProcW") returned 0x7769b0ac [0050.884] GetStockObject (i=5) returned 0x1900015 [0050.904] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0050.915] CoTaskMemAlloc (cb=0x5c) returned 0x2e96b0 [0050.915] RegisterClassW (lpWndClass=0x1ae350) returned 0xc132 [0050.915] CoTaskMemFree (pv=0x2e96b0) [0050.916] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0050.916] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x11b0000, lpParam=0x0) returned 0x70126 [0050.947] SetWindowLongPtrW (hWnd=0x70126, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1af9131c [0050.950] GetWindowLongPtrW (hWnd=0x70126, nIndex=-4) returned 0x7769b0ac [0051.184] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ad798 | out: phkResult=0x1ad798*=0x1fc) returned 0x0 [0051.185] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x1ad7e8, lpData=0x0, lpcbData=0x1ad7e0*=0x0 | out: lpType=0x1ad7e8*=0x0, lpData=0x0, lpcbData=0x1ad7e0*=0x0) returned 0x2 [0051.185] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x1ad7e8, lpData=0x0, lpcbData=0x1ad7e0*=0x0 | out: lpType=0x1ad7e8*=0x0, lpData=0x0, lpcbData=0x1ad7e0*=0x0) returned 0x2 [0051.188] RegCloseKey (hKey=0x1fc) returned 0x0 [0051.189] SetWindowLongPtrW (hWnd=0x70126, nIndex=-4, dwNewLong=0x1af9136c) returned 0x7769b0ac [0051.189] GetWindowLongPtrW (hWnd=0x70126, nIndex=-4) returned 0x1af9136c [0051.189] GetWindowLongPtrW (hWnd=0x70126, nIndex=-16) returned 0x6c10000 [0051.192] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc133 [0051.193] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc134 [0051.193] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x70126, Msg=0x81, wParam=0x0, lParam=0x1add30) returned 0x1 [0051.193] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x70126, Msg=0x83, wParam=0x0, lParam=0x1adde0) returned 0x0 [0051.194] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x70126, Msg=0x1, wParam=0x0, lParam=0x1add30) returned 0x0 [0051.194] GetClientRect (in: hWnd=0x70126, lpRect=0x1ad7f0 | out: lpRect=0x1ad7f0) returned 1 [0051.194] GetWindowRect (in: hWnd=0x70126, lpRect=0x1ad7f0 | out: lpRect=0x1ad7f0) returned 1 [0051.197] GetParent (hWnd=0x70126) returned 0x0 [0051.197] DeactivateActCtx (dwFlags=0x0, ulCookie=0x10017eb000000001) returned 1 [0051.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0051.950] AdjustWindowRectEx (in: lpRect=0x1ae960, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ae960) returned 1 [0052.110] GdiplusStartup (in: token=0x7fe94326d08, input=0x1ad0f8, output=0x1ad1a8 | out: token=0x7fe94326d08, output=0x1ad1a8) returned 0x0 [0052.119] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x1ae910) returned 0x0 [0052.154] GdipCreateFont (fontFamily=0x1b3ec5a0, emSize=0x7fef15ecd25, style=1, unit=0x3, font=0x25cd418) returned 0x0 [0052.257] GdipGetFontSize (font=0x1b41ae40, size=0x25cd420) returned 0x0 [0052.274] GetSystemDefaultLCID () returned 0x409 [0052.274] GetStockObject (i=17) returned 0x18a0025 [0052.276] GetObjectW (in: h=0x18a0025, c=92, pv=0x1ae650 | out: pv=0x1ae650) returned 92 [0052.277] GetDC (hWnd=0x0) returned 0x120107ff [0052.288] CoTaskMemAlloc (cb=0x5c) returned 0x2e96b0 [0052.288] GdipCreateFontFromLogfontW (hdc=0x120107ff, logfont=0x2e96b0, font=0x1ae790) returned 0x0 [0052.692] CoTaskMemFree (pv=0x2e96b0) [0052.693] CoTaskMemAlloc (cb=0x5c) returned 0x2e96b0 [0052.693] CoTaskMemFree (pv=0x2e96b0) [0052.693] CoTaskMemAlloc (cb=0x5c) returned 0x2e96b0 [0052.693] CoTaskMemFree (pv=0x2e96b0) [0052.694] GdipGetFontUnit (font=0x1b3efe20, unit=0x1ae700) returned 0x0 [0052.694] GdipGetFontSize (font=0x1b3efe20, size=0x1ae70c) returned 0x0 [0052.694] GdipGetFontStyle (font=0x1b3efe20, style=0x1ae6f8) returned 0x0 [0052.695] GdipGetFamily (font=0x1b3efe20, family=0x1ae6f0) returned 0x0 [0052.696] GdipGetFontSize (font=0x1b3efe20, size=0x25cde58) returned 0x0 [0052.696] ReleaseDC (hWnd=0x0, hDC=0x120107ff) returned 1 [0052.698] GetDC (hWnd=0x0) returned 0x120107ff [0052.698] GdipCreateFromHDC (hdc=0x120107ff, graphics=0x1ae708) returned 0x0 [0052.701] GdipGetDpiY (graphics=0x1b4ef3c0, dpi=0x25ce030) returned 0x0 [0052.702] GdipGetFontHeight (font=0x1b3efe20, graphics=0x1b4ef3c0, height=0x1ae704) returned 0x0 [0052.702] GdipGetEmHeight (family=0x1b3ec5a0, style=0, EmHeight=0x1ae708) returned 0x0 [0052.703] GdipGetLineSpacing (family=0x1b3ec5a0, style=0, LineSpacing=0x1ae708) returned 0x0 [0052.704] GdipDeleteGraphics (graphics=0x1b4ef3c0) returned 0x0 [0052.704] ReleaseDC (hWnd=0x0, hDC=0x120107ff) returned 1 [0052.706] GdipCreateFont (fontFamily=0x1b3ec5a0, emSize=0x7fef15ecd25, style=0, unit=0x3, font=0x25cdfc0) returned 0x0 [0052.707] GdipGetFontSize (font=0x1b466ca0, size=0x25cdfc8) returned 0x0 [0052.721] GdipDeleteFont (font=0x1b3efe20) returned 0x0 [0052.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0052.737] AdjustWindowRectEx (in: lpRect=0x1ae7f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ae7f8) returned 1 [0052.848] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x25cea80, nLength=0xc, lpnLengthNeeded=0x1ae470 | out: pvInfo=0x25cea80, lpnLengthNeeded=0x1ae470) returned 1 [0052.869] SetConsoleCtrlHandler (HandlerRoutine=0x1af913bc, Add=1) returned 1 [0052.878] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0052.879] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0052.881] GetClassInfoW (in: hInstance=0x11b0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x25ceb40 | out: lpWndClass=0x25ceb40) returned 0 [0052.881] CoTaskMemAlloc (cb=0x58) returned 0x2e0540 [0052.881] RegisterClassW (lpWndClass=0x1ae280) returned 0xc136 [0052.882] CoTaskMemFree (pv=0x2e0540) [0052.882] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x11b0000, lpParam=0x0) returned 0x40128 [0052.891] NtdllDefWindowProc_W (hWnd=0x40128, Msg=0x83, wParam=0x0, lParam=0x1adca0) returned 0x0 [0052.891] NtdllDefWindowProc_W (hWnd=0x40128, Msg=0x1, wParam=0x0, lParam=0x1adb90) returned 0x0 [0052.891] NtdllDefWindowProc_W (hWnd=0x40128, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0052.891] NtdllDefWindowProc_W (hWnd=0x40128, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0052.901] GetSysColor (nIndex=10) returned 0xb4b4b4 [0052.901] GetSysColor (nIndex=2) returned 0xd1b499 [0052.901] GetSysColor (nIndex=9) returned 0x0 [0052.901] GetSysColor (nIndex=12) returned 0xababab [0052.901] GetSysColor (nIndex=15) returned 0xf0f0f0 [0052.901] GetSysColor (nIndex=20) returned 0xffffff [0052.901] GetSysColor (nIndex=16) returned 0xa0a0a0 [0052.901] GetSysColor (nIndex=15) returned 0xf0f0f0 [0052.901] GetSysColor (nIndex=16) returned 0xa0a0a0 [0052.901] GetSysColor (nIndex=21) returned 0x696969 [0052.902] GetSysColor (nIndex=22) returned 0xe3e3e3 [0052.902] GetSysColor (nIndex=20) returned 0xffffff [0052.902] GetSysColor (nIndex=18) returned 0x0 [0052.902] GetSysColor (nIndex=1) returned 0x0 [0052.902] GetSysColor (nIndex=27) returned 0xead1b9 [0052.902] GetSysColor (nIndex=28) returned 0xf2e4d7 [0052.902] GetSysColor (nIndex=17) returned 0x6d6d6d [0052.902] GetSysColor (nIndex=13) returned 0xff9933 [0052.902] GetSysColor (nIndex=14) returned 0xffffff [0052.902] GetSysColor (nIndex=26) returned 0xcc6600 [0052.902] GetSysColor (nIndex=11) returned 0xfcf7f4 [0052.902] GetSysColor (nIndex=3) returned 0xdbcdbf [0052.902] GetSysColor (nIndex=19) returned 0x544e43 [0052.902] GetSysColor (nIndex=24) returned 0xe1ffff [0052.902] GetSysColor (nIndex=23) returned 0x0 [0052.903] GetSysColor (nIndex=4) returned 0xf0f0f0 [0052.903] GetSysColor (nIndex=30) returned 0xf0f0f0 [0052.903] GetSysColor (nIndex=29) returned 0xff9933 [0052.903] GetSysColor (nIndex=7) returned 0x0 [0052.903] GetSysColor (nIndex=0) returned 0xc8c8c8 [0052.903] GetSysColor (nIndex=5) returned 0xffffff [0052.903] GetSysColor (nIndex=6) returned 0x646464 [0052.903] GetSysColor (nIndex=8) returned 0x0 [0052.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0052.905] AdjustWindowRectEx (in: lpRect=0x1ae7f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ae7f8) returned 1 [0052.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0052.943] AdjustWindowRectEx (in: lpRect=0x1ae8c8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ae8c8) returned 1 [0052.944] GetSystemMetrics (nIndex=59) returned 1460 [0052.944] GetSystemMetrics (nIndex=60) returned 920 [0052.944] GetSystemMetrics (nIndex=34) returned 132 [0052.944] GetSystemMetrics (nIndex=35) returned 38 [0052.944] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0052.944] AdjustWindowRectEx (in: lpRect=0x1ae688, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ae688) returned 1 [0052.946] GetCurrentThreadId () returned 0x240 [0052.946] GetCurrentThreadId () returned 0x240 [0052.956] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0052.958] AdjustWindowRectEx (in: lpRect=0x1ae5d8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ae5d8) returned 1 [0052.974] GdipGetFamilyName (in: family=0x1b3ec5a0, name=0x1ae320, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0052.976] CreateCompatibleDC (hdc=0x0) returned 0x2301027f [0052.978] GetCurrentObject (hdc=0x2301027f, type=0x1) returned 0x1b00017 [0052.978] GetCurrentObject (hdc=0x2301027f, type=0x2) returned 0x1900010 [0052.978] GetCurrentObject (hdc=0x2301027f, type=0x7) returned 0x185000f [0052.978] GetCurrentObject (hdc=0x2301027f, type=0x6) returned 0x18a002e [0052.983] SaveDC (hdc=0x2301027f) returned 1 [0052.985] GetDeviceCaps (hdc=0x2301027f, index=90) returned 96 [0052.988] CoTaskMemAlloc (cb=0x5c) returned 0x2e9800 [0052.988] CreateFontIndirectW (lplf=0x2e9800) returned 0x180a025a [0052.988] CoTaskMemFree (pv=0x2e9800) [0052.988] GetObjectW (in: h=0x180a025a, c=92, pv=0x1ae330 | out: pv=0x1ae330) returned 92 [0052.995] GetCurrentObject (hdc=0x2301027f, type=0x6) returned 0x18a002e [0052.995] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ae130 | out: pv=0x1ae130) returned 92 [0052.998] SelectObject (hdc=0x2301027f, h=0x180a025a) returned 0x18a002e [0052.999] GetMapMode (hdc=0x2301027f) returned 1 [0053.000] GetTextMetricsW (in: hdc=0x2301027f, lptm=0x1ae340 | out: lptm=0x1ae340) returned 1 [0053.001] DrawTextExW (in: hdc=0x2301027f, lpchText="You shouldn't done that", cchText=23, lprc=0x1ae548, format=0x2400, lpdtp=0x25cfde0 | out: lpchText="You shouldn't done that", lprc=0x1ae548) returned 20 [0053.028] CreateCompatibleDC (hdc=0x0) returned 0x3101081c [0053.031] GetDC (hWnd=0x0) returned 0x120107ff [0053.031] GdipCreateFromHDC (hdc=0x120107ff, graphics=0x1ae518) returned 0x0 [0053.031] CoTaskMemAlloc (cb=0x5c) returned 0x2e9800 [0053.031] GdipGetLogFontW (font=0x1b466ca0, graphics=0x1b4ef3c0, logfontW=0x2e9800) returned 0x0 [0053.031] CoTaskMemFree (pv=0x2e9800) [0053.031] CoTaskMemAlloc (cb=0x5c) returned 0x2e9800 [0053.032] CoTaskMemFree (pv=0x2e9800) [0053.032] CoTaskMemAlloc (cb=0x5c) returned 0x2e9800 [0053.032] CoTaskMemFree (pv=0x2e9800) [0053.032] GdipDeleteGraphics (graphics=0x1b4ef3c0) returned 0x0 [0053.032] ReleaseDC (hWnd=0x0, hDC=0x120107ff) returned 1 [0053.032] CoTaskMemAlloc (cb=0x5c) returned 0x2e9800 [0053.032] CreateFontIndirectW (lplf=0x2e9800) returned 0x270a0229 [0053.032] CoTaskMemFree (pv=0x2e9800) [0053.033] SelectObject (hdc=0x3101081c, h=0x270a0229) returned 0x18a002e [0053.034] GetTextMetricsW (in: hdc=0x3101081c, lptm=0x1ae798 | out: lptm=0x1ae798) returned 1 [0053.034] GetTextExtentPoint32W (in: hdc=0x3101081c, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x25d0460 | out: psizl=0x25d0460) returned 1 [0053.036] SelectObject (hdc=0x3101081c, h=0x18a002e) returned 0x270a0229 [0053.038] DeleteDC (hdc=0x3101081c) returned 1 [0053.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0053.038] AdjustWindowRectEx (in: lpRect=0x1ae400, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ae400) returned 1 [0053.038] AdjustWindowRectEx (in: lpRect=0x1ae680, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ae680) returned 1 [0053.039] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0053.039] AdjustWindowRectEx (in: lpRect=0x1ae2f0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ae2f0) returned 1 [0053.039] AdjustWindowRectEx (in: lpRect=0x1ae470, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ae470) returned 1 [0053.039] GetSystemMetrics (nIndex=34) returned 132 [0053.039] GetSystemMetrics (nIndex=35) returned 38 [0053.039] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0053.039] AdjustWindowRectEx (in: lpRect=0x1ae690, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ae690) returned 1 [0053.039] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0053.039] AdjustWindowRectEx (in: lpRect=0x1ae4e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ae4e0) returned 1 [0053.039] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef0600000 [0053.039] AdjustWindowRectEx (in: lpRect=0x1ae288, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ae288) returned 1 [0053.042] GetCurrentActCtx (in: lphActCtx=0x1ae9c0 | out: lphActCtx=0x1ae9c0*=0x0) returned 1 [0053.042] ActivateActCtx (in: hActCtx=0x1085ea8, lpCookie=0x1aea00 | out: hActCtx=0x1085ea8, lpCookie=0x1aea00) returned 1 [0053.045] GetCurrentActCtx (in: lphActCtx=0x1ae650 | out: lphActCtx=0x1ae650*=0x1085ea8) returned 1 [0053.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0053.046] AdjustWindowRectEx (in: lpRect=0x1ae570, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ae570) returned 1 [0053.046] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0053.046] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Form1", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=234, nHeight=73, hWndParent=0x0, hMenu=0x0, hInstance=0x11b0000, lpParam=0x0) returned 0x301b0 [0053.046] SetWindowLongPtrW (hWnd=0x301b0, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1af9131c [0053.046] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-4) returned 0x7769b0ac [0053.046] SetWindowLongPtrW (hWnd=0x301b0, nIndex=-4, dwNewLong=0x1af9145c) returned 0x7769b0ac [0053.046] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-4) returned 0x1af9145c [0053.046] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-16) returned 0x6cf0000 [0053.046] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x81, wParam=0x0, lParam=0x1add10) returned 0x1 [0053.047] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x83, wParam=0x0, lParam=0x1addc0) returned 0x0 [0053.445] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x1, wParam=0x0, lParam=0x1adcf0) returned 0x0 [0053.445] GetClientRect (in: hWnd=0x301b0, lpRect=0x1ad770 | out: lpRect=0x1ad770) returned 1 [0053.446] GetWindowRect (in: hWnd=0x301b0, lpRect=0x1ad770 | out: lpRect=0x1ad770) returned 1 [0053.446] SetWindowTextW (hWnd=0x301b0, lpString="Form1") returned 1 [0053.446] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xc, wParam=0x0, lParam=0x25cd04c) returned 0x1 [0053.448] GetStartupInfoW (in: lpStartupInfo=0x25d08b0 | out: lpStartupInfo=0x25d08b0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cerber Ransomware Source.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0053.448] GetParent (hWnd=0x301b0) returned 0x0 [0053.448] SetWindowLongPtrW (hWnd=0x301b0, nIndex=-8, dwNewLong=0x0) returned 0x0 [0053.456] GetSystemMetrics (nIndex=11) returned 32 [0053.456] GetSystemMetrics (nIndex=12) returned 32 [0053.456] GetDC (hWnd=0x0) returned 0x3010807 [0053.456] GetDeviceCaps (hdc=0x3010807, index=12) returned 32 [0053.456] GetDeviceCaps (hdc=0x3010807, index=14) returned 1 [0053.456] ReleaseDC (hWnd=0x0, hDC=0x3010807) returned 1 [0053.457] CreateIconFromResourceEx (presbits=0x25d3508, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xb00df [0053.457] GetSystemMetrics (nIndex=49) returned 16 [0053.457] GetSystemMetrics (nIndex=50) returned 16 [0053.459] CreateIconFromResourceEx (presbits=0x25d4610, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x8012f [0053.460] SendMessageW (hWnd=0x301b0, Msg=0x80, wParam=0x0, lParam=0x8012f) returned 0x0 [0053.460] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x80, wParam=0x0, lParam=0x8012f) returned 0x0 [0053.460] SendMessageW (hWnd=0x301b0, Msg=0x80, wParam=0x1, lParam=0xb00df) returned 0x0 [0053.460] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x80, wParam=0x1, lParam=0xb00df) returned 0x0 [0053.463] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x8012f [0053.464] GetSystemMenu (hWnd=0x301b0, bRevert=0) returned 0x1101b1 [0053.466] GetWindowPlacement (in: hWnd=0x301b0, lpwndpl=0x1ae658 | out: lpwndpl=0x1ae658) returned 1 [0053.466] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0053.466] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0053.466] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0053.466] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0053.466] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0053.466] GetClientRect (in: hWnd=0x301b0, lpRect=0x1ae720 | out: lpRect=0x1ae720) returned 1 [0053.466] GetClientRect (in: hWnd=0x301b0, lpRect=0x1ae650 | out: lpRect=0x1ae650) returned 1 [0053.466] GetWindowRect (in: hWnd=0x301b0, lpRect=0x1ae650 | out: lpRect=0x1ae650) returned 1 [0053.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0053.467] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-16) returned 0x6cf0000 [0053.467] GetWindowTextLengthW (hWnd=0x301b0) returned 5 [0053.467] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0053.467] GetSystemMetrics (nIndex=42) returned 0 [0053.467] GetWindowTextW (in: hWnd=0x301b0, lpString=0x1ae460, nMaxCount=6 | out: lpString="Form1") returned 5 [0053.467] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xd, wParam=0x6, lParam=0x1ae460) returned 0x5 [0053.468] GetWindowTextLengthW (hWnd=0x301b0) returned 5 [0053.468] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0053.468] GetSystemMetrics (nIndex=42) returned 0 [0053.468] GetWindowTextW (in: hWnd=0x301b0, lpString=0x1ae460, nMaxCount=6 | out: lpString="Form1") returned 5 [0053.468] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xd, wParam=0x6, lParam=0x1ae460) returned 0x5 [0053.468] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-16) returned 0x6cf0000 [0053.468] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-20) returned 0x50100 [0053.468] SetWindowLongPtrW (hWnd=0x301b0, nIndex=-16, dwNewLong=0x2cf0000) returned 0x6cf0000 [0053.468] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1ae530) returned 0x0 [0053.468] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1ae530) returned 0x0 [0053.468] SetWindowLongPtrW (hWnd=0x301b0, nIndex=-20, dwNewLong=0x50000) returned 0x50100 [0053.468] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x1ae530) returned 0x0 [0053.468] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x1ae530) returned 0x0 [0053.469] SetWindowPos (hWnd=0x301b0, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0053.469] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x46, wParam=0x0, lParam=0x1ae580) returned 0x0 [0053.469] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x83, wParam=0x1, lParam=0x1ae550) returned 0x0 [0053.469] GetWindowPlacement (in: hWnd=0x301b0, lpwndpl=0x1ae158 | out: lpwndpl=0x1ae158) returned 1 [0053.469] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x47, wParam=0x0, lParam=0x1ae580) returned 0x0 [0053.469] GetClientRect (in: hWnd=0x301b0, lpRect=0x1adff0 | out: lpRect=0x1adff0) returned 1 [0053.469] GetWindowRect (in: hWnd=0x301b0, lpRect=0x1adff0 | out: lpRect=0x1adff0) returned 1 [0053.471] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x83, wParam=0x1, lParam=0x1adee0) returned 0x0 [0053.471] RedrawWindow (hWnd=0x301b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0053.472] GetSystemMenu (hWnd=0x301b0, bRevert=0) returned 0x1101b1 [0053.472] GetWindowPlacement (in: hWnd=0x301b0, lpwndpl=0x1ae5f8 | out: lpwndpl=0x1ae5f8) returned 1 [0053.472] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0053.472] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0053.472] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0053.472] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0053.472] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0053.472] ShowWindow (hWnd=0x301b0, nCmdShow=5) [0053.472] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0053.473] GetCurrentActCtx (in: lphActCtx=0x1ae040 | out: lphActCtx=0x1ae040*=0x1085ea8) returned 1 [0053.473] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0053.474] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x25d4d68 | out: lpWndClass=0x25d4d68) returned 1 [0053.474] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0053.475] CoTaskMemAlloc (cb=0x58) returned 0x2e0540 [0053.475] RegisterClassW (lpWndClass=0x1add20) returned 0xc137 [0053.475] CoTaskMemFree (pv=0x2e0540) [0053.475] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0053.475] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="You shouldn't done that", dwStyle=0x5600000d, X=12, Y=9, nWidth=201, nHeight=20, hWndParent=0x301b0, hMenu=0x0, hInstance=0x11b0000, lpParam=0x0) returned 0x301aa [0053.475] SetWindowLongPtrW (hWnd=0x301aa, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1af914ac [0053.475] GetWindowLongPtrW (hWnd=0x301aa, nIndex=-4) returned 0x7fefc1961b4 [0053.475] SetWindowLongPtrW (hWnd=0x301aa, nIndex=-4, dwNewLong=0x1af914fc) returned 0x7fefc1961b4 [0053.475] GetWindowLongPtrW (hWnd=0x301aa, nIndex=-4) returned 0x1af914fc [0053.475] GetWindowLongPtrW (hWnd=0x301aa, nIndex=-16) returned 0x4600000d [0053.475] GetWindowLongPtrW (hWnd=0x301aa, nIndex=-12) returned 0x0 [0053.475] SetWindowLongPtrW (hWnd=0x301aa, nIndex=-12, dwNewLong=0x301aa) returned 0x0 [0053.475] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x81, wParam=0x0, lParam=0x1ad700) returned 0x1 [0053.476] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x83, wParam=0x0, lParam=0x1ad7b0) returned 0x0 [0053.476] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x1, wParam=0x0, lParam=0x1ad6c0) returned 0x0 [0053.477] GetWindow (hWnd=0x301aa, uCmd=0x3) returned 0x0 [0053.477] GetClientRect (in: hWnd=0x301aa, lpRect=0x1ad100 | out: lpRect=0x1ad100) returned 1 [0053.477] GetWindowRect (in: hWnd=0x301aa, lpRect=0x1ad100 | out: lpRect=0x1ad100) returned 1 [0053.477] GetParent (hWnd=0x301aa) returned 0x301b0 [0053.477] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301b0, lpPoints=0x1ad100, cPoints=0x2 | out: lpPoints=0x1ad100) returned -6815827 [0053.478] SetWindowTextW (hWnd=0x301aa, lpString="You shouldn't done that") returned 1 [0053.478] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0xc, wParam=0x0, lParam=0x25cd004) returned 0x1 [0053.478] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x5, wParam=0x0, lParam=0x1400c9) returned 0x0 [0053.478] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x3, wParam=0x0, lParam=0x9000c) returned 0x0 [0053.478] GetClientRect (in: hWnd=0x301aa, lpRect=0x1ad250 | out: lpRect=0x1ad250) returned 1 [0053.478] GetWindowRect (in: hWnd=0x301aa, lpRect=0x1ad250 | out: lpRect=0x1ad250) returned 1 [0053.478] GetParent (hWnd=0x301aa) returned 0x301b0 [0053.478] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301b0, lpPoints=0x1ad250, cPoints=0x2 | out: lpPoints=0x1ad250) returned -6815827 [0053.479] SendMessageW (hWnd=0x301aa, Msg=0x2210, wParam=0x1aa0001, lParam=0x301aa) returned 0x0 [0053.479] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x2210, wParam=0x1aa0001, lParam=0x301aa) returned 0x0 [0053.479] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0053.479] GetParent (hWnd=0x301aa) returned 0x301b0 [0053.480] GetWindowTextLengthW (hWnd=0x301b0) returned 5 [0053.480] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0053.480] GetSystemMetrics (nIndex=42) returned 0 [0053.480] GetWindowTextW (in: hWnd=0x301b0, lpString=0x1adfc0, nMaxCount=6 | out: lpString="Form1") returned 5 [0053.480] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xd, wParam=0x6, lParam=0x1adfc0) returned 0x5 [0054.292] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0054.292] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-16) returned 0x6cf0000 [0054.292] GetWindowTextLengthW (hWnd=0x301b0) returned 5 [0054.292] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0054.292] GetSystemMetrics (nIndex=42) returned 0 [0054.292] GetWindowTextW (in: hWnd=0x301b0, lpString=0x1adce0, nMaxCount=6 | out: lpString="Form1") returned 5 [0054.292] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xd, wParam=0x6, lParam=0x1adce0) returned 0x5 [0054.292] GetWindowTextLengthW (hWnd=0x301b0) returned 5 [0054.292] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0054.292] GetSystemMetrics (nIndex=42) returned 0 [0054.292] GetWindowTextW (in: hWnd=0x301b0, lpString=0x1adce0, nMaxCount=6 | out: lpString="Form1") returned 5 [0054.292] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xd, wParam=0x6, lParam=0x1adce0) returned 0x5 [0054.293] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-16) returned 0x6cf0000 [0054.293] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-20) returned 0x50100 [0054.293] SetWindowLongPtrW (hWnd=0x301b0, nIndex=-16, dwNewLong=0x12cf0000) returned 0x6cf0000 [0054.293] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1addb0) returned 0x0 [0054.293] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1addb0) returned 0x0 [0054.293] SetWindowLongPtrW (hWnd=0x301b0, nIndex=-20, dwNewLong=0xd0000) returned 0x50100 [0054.293] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x1addb0) returned 0x0 [0054.296] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x1addb0) returned 0x0 [0054.296] SetWindowPos (hWnd=0x301b0, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0054.296] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x46, wParam=0x0, lParam=0x1ade00) returned 0x0 [0054.296] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x83, wParam=0x1, lParam=0x1addd0) returned 0x0 [0054.297] GetWindowPlacement (in: hWnd=0x301b0, lpwndpl=0x1ad9d8 | out: lpwndpl=0x1ad9d8) returned 1 [0054.297] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x47, wParam=0x0, lParam=0x1ade00) returned 0x0 [0054.297] GetClientRect (in: hWnd=0x301b0, lpRect=0x1ad870 | out: lpRect=0x1ad870) returned 1 [0054.297] GetWindowRect (in: hWnd=0x301b0, lpRect=0x1ad870 | out: lpRect=0x1ad870) returned 1 [0054.297] RedrawWindow (hWnd=0x301b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0054.297] GetSystemMenu (hWnd=0x301b0, bRevert=0) returned 0x1101b1 [0054.297] GetWindowPlacement (in: hWnd=0x301b0, lpwndpl=0x1ade78 | out: lpwndpl=0x1ade78) returned 1 [0054.297] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0054.297] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0054.297] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0054.297] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0054.297] EnableMenuItem (hMenu=0x1101b1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0054.470] SetLayeredWindowAttributes (hwnd=0x301b0, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0055.020] GetCurrentThreadId () returned 0x240 [0055.254] EnumThreadWindows (dwThreadId=0x240, lpfn=0x1af9154c, lParam=0x301b0) returned 1 [0056.312] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-8) returned 0x0 [0056.312] GetWindowLongPtrW (hWnd=0x40128, nIndex=-8) returned 0x0 [0056.312] GetWindowLongPtrW (hWnd=0x50122, nIndex=-8) returned 0x40128 [0056.321] GetParent (hWnd=0x301b0) returned 0x0 [0056.321] GetWindowThreadProcessId (in: hWnd=0x301aa, lpdwProcessId=0x1adec0 | out: lpdwProcessId=0x1adec0) returned 0x240 [0056.599] GetCurrentActCtx (in: lphActCtx=0x1add10 | out: lphActCtx=0x1add10*=0x1085ea8) returned 1 [0056.599] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0056.599] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0056.599] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x11b0000, lpParam=0x0) returned 0x301ae [0056.600] SetWindowLongPtrW (hWnd=0x301ae, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1af9131c [0056.600] GetWindowLongPtrW (hWnd=0x301ae, nIndex=-4) returned 0x7769b0ac [0056.600] SetWindowLongPtrW (hWnd=0x301ae, nIndex=-4, dwNewLong=0x1af9159c) returned 0x7769b0ac [0056.600] GetWindowLongPtrW (hWnd=0x301ae, nIndex=-4) returned 0x1af9159c [0056.600] GetWindowLongPtrW (hWnd=0x301ae, nIndex=-16) returned 0x6c10000 [0056.600] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ae, Msg=0x24, wParam=0x0, lParam=0x1ad460) returned 0x0 [0056.600] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ae, Msg=0x81, wParam=0x0, lParam=0x1ad3d0) returned 0x1 [0056.600] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ae, Msg=0x83, wParam=0x0, lParam=0x1ad480) returned 0x0 [0056.600] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ae, Msg=0x1, wParam=0x0, lParam=0x1ad390) returned 0x0 [0056.600] GetClientRect (in: hWnd=0x301ae, lpRect=0x1ace00 | out: lpRect=0x1ace00) returned 1 [0056.600] GetWindowRect (in: hWnd=0x301ae, lpRect=0x1ace00 | out: lpRect=0x1ace00) returned 1 [0056.601] SetWindowTextW (hWnd=0x301ae, lpString="WindowsFormsParkingWindow") returned 1 [0056.601] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ae, Msg=0xc, wParam=0x0, lParam=0x25d59e4) returned 0x1 [0056.601] GetParent (hWnd=0x301ae) returned 0x0 [0056.602] SetParent (hWndChild=0x301aa, hWndNewParent=0x301ae) returned 0x301b0 [0056.602] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0056.603] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x46, wParam=0x0, lParam=0x1add50) returned 0x0 [0056.603] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0056.603] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x47, wParam=0x0, lParam=0x1add50) returned 0x0 [0056.603] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x3, wParam=0x0, lParam=0x9000c) returned 0x0 [0056.603] GetClientRect (in: hWnd=0x301aa, lpRect=0x1acda0 | out: lpRect=0x1acda0) returned 1 [0056.603] GetWindowRect (in: hWnd=0x301aa, lpRect=0x1acda0 | out: lpRect=0x1acda0) returned 1 [0056.603] GetParent (hWnd=0x301aa) returned 0x301ae [0056.603] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ae, lpPoints=0x1acda0, cPoints=0x2 | out: lpPoints=0x1acda0) returned -1572867 [0056.603] GetClientRect (in: hWnd=0x301aa, lpRect=0x1ad780 | out: lpRect=0x1ad780) returned 1 [0056.603] GetWindowRect (in: hWnd=0x301aa, lpRect=0x1ad780 | out: lpRect=0x1ad780) returned 1 [0056.603] GetParent (hWnd=0x301aa) returned 0x301ae [0056.603] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ae, lpPoints=0x1ad780, cPoints=0x2 | out: lpPoints=0x1ad780) returned -1572867 [0056.603] GetParent (hWnd=0x301aa) returned 0x301ae [0056.604] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.604] GetWindowLongPtrW (hWnd=0x301b0, nIndex=-20) returned 0xd0100 [0056.604] DestroyWindow (hWnd=0x301b0) returned 1 [0056.604] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0056.625] GetWindowTextLengthW (hWnd=0x301b0) returned 5 [0056.625] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0056.625] GetSystemMetrics (nIndex=42) returned 0 [0056.625] GetWindowTextW (in: hWnd=0x301b0, lpString=0x1ad540, nMaxCount=6 | out: lpString="Form1") returned 5 [0056.625] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0xd, wParam=0x6, lParam=0x1ad540) returned 0x5 [0056.626] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0056.626] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301b0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0056.779] GetCurrentActCtx (in: lphActCtx=0x1add30 | out: lphActCtx=0x1add30*=0x1085ea8) returned 1 [0056.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0056.780] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0056.780] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Form1", dwStyle=0x2cf0000, X=75, Y=75, nWidth=234, nHeight=73, hWndParent=0x0, hMenu=0x0, hInstance=0x11b0000, lpParam=0x0) returned 0x401a8 [0056.780] SetWindowLongPtrW (hWnd=0x401a8, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1af9131c [0056.780] GetWindowLongPtrW (hWnd=0x401a8, nIndex=-4) returned 0x7769b0ac [0056.780] SetWindowLongPtrW (hWnd=0x401a8, nIndex=-4, dwNewLong=0x1af915ec) returned 0x7769b0ac [0056.780] GetWindowLongPtrW (hWnd=0x401a8, nIndex=-4) returned 0x1af915ec [0056.780] GetWindowLongPtrW (hWnd=0x401a8, nIndex=-16) returned 0x6cf0000 [0056.781] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x81, wParam=0x0, lParam=0x1ad3f0) returned 0x1 [0056.781] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x83, wParam=0x0, lParam=0x1ad4a0) returned 0x0 [0056.781] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x1, wParam=0x0, lParam=0x1ad3d0) returned 0x0 [0056.781] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ace50 | out: lpRect=0x1ace50) returned 1 [0056.781] GetWindowRect (in: hWnd=0x401a8, lpRect=0x1ace50 | out: lpRect=0x1ace50) returned 1 [0056.782] SetWindowTextW (hWnd=0x401a8, lpString="Form1") returned 1 [0056.782] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xc, wParam=0x0, lParam=0x25d5e34) returned 0x1 [0056.782] SetLayeredWindowAttributes (hwnd=0x401a8, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0056.783] GetStartupInfoW (in: lpStartupInfo=0x25d6320 | out: lpStartupInfo=0x25d6320*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cerber Ransomware Source.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0056.783] GetParent (hWnd=0x401a8) returned 0x0 [0056.784] GetStockObject (i=5) returned 0x1900015 [0056.785] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0056.785] CoTaskMemAlloc (cb=0x5c) returned 0x2e9800 [0056.785] RegisterClassW (lpWndClass=0x1ada20) returned 0xc13b [0056.785] CoTaskMemFree (pv=0x2e9800) [0056.785] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0056.785] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x11b0000, lpParam=0x0) returned 0x301ac [0056.785] SetWindowLongPtrW (hWnd=0x301ac, nIndex=-4, dwNewLong=0x7769b0ac) returned 0x1af9163c [0056.785] GetWindowLongPtrW (hWnd=0x301ac, nIndex=-4) returned 0x7769b0ac [0056.785] SetWindowLongPtrW (hWnd=0x301ac, nIndex=-4, dwNewLong=0x1af9168c) returned 0x7769b0ac [0056.785] GetWindowLongPtrW (hWnd=0x301ac, nIndex=-4) returned 0x1af9168c [0056.785] GetWindowLongPtrW (hWnd=0x301ac, nIndex=-16) returned 0x4c00000 [0056.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ac, Msg=0x24, wParam=0x0, lParam=0x1ad490) returned 0x0 [0056.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ac, Msg=0x81, wParam=0x0, lParam=0x1ad400) returned 0x1 [0056.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ac, Msg=0x83, wParam=0x0, lParam=0x1ad4b0) returned 0x0 [0056.920] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ac, Msg=0x1, wParam=0x0, lParam=0x1ad400) returned 0x0 [0056.920] SetWindowLongPtrW (hWnd=0x401a8, nIndex=-8, dwNewLong=0x301ac) returned 0x0 [0056.921] SendMessageW (hWnd=0x401a8, Msg=0x80, wParam=0x0, lParam=0x8012f) returned 0x0 [0056.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x80, wParam=0x0, lParam=0x8012f) returned 0x0 [0056.921] SendMessageW (hWnd=0x401a8, Msg=0x80, wParam=0x1, lParam=0xb00df) returned 0x0 [0056.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x80, wParam=0x1, lParam=0xb00df) returned 0x0 [0056.921] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x8012f [0056.922] GetSystemMenu (hWnd=0x401a8, bRevert=0) returned 0x1201b1 [0056.922] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1add38 | out: lpwndpl=0x1add38) returned 1 [0056.922] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0056.922] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0056.922] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0056.922] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0056.922] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0056.922] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ade00 | out: lpRect=0x1ade00) returned 1 [0056.922] GetClientRect (in: hWnd=0x401a8, lpRect=0x1add30 | out: lpRect=0x1add30) returned 1 [0056.922] GetWindowRect (in: hWnd=0x401a8, lpRect=0x1add30 | out: lpRect=0x1add30) returned 1 [0056.922] SetWindowPos (hWnd=0x401a8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0056.922] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x46, wParam=0x0, lParam=0x1adc90) returned 0x0 [0056.926] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0056.927] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1ad888 | out: lpwndpl=0x1ad888) returned 1 [0056.927] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad7a0 | out: lpRect=0x1ad7a0) returned 1 [0056.927] GetWindowTextLengthW (hWnd=0x401a8) returned 5 [0056.927] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0056.927] GetSystemMetrics (nIndex=42) returned 0 [0056.927] GetWindowTextW (in: hWnd=0x401a8, lpString=0x1ad510, nMaxCount=6 | out: lpString="Form1") returned 5 [0056.927] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xd, wParam=0x6, lParam=0x1ad510) returned 0x5 [0056.927] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad588 | out: lpRect=0x1ad588) returned 1 [0056.930] GetSystemMetrics (nIndex=80) returned 1 [0056.932] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1af916dc, dwData=0x0) returned 1 [0056.933] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1acd80 | out: lpmi=0x1acd80) returned 1 [0056.933] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x60106b5 [0056.933] GetDeviceCaps (hdc=0x60106b5, index=12) returned 32 [0056.934] GetDeviceCaps (hdc=0x60106b5, index=14) returned 1 [0056.934] DeleteDC (hdc=0x60106b5) returned 1 [0056.934] GetCurrentObject (hdc=0x1010815, type=0x1) returned 0x1b00017 [0056.934] GetCurrentObject (hdc=0x1010815, type=0x2) returned 0x1900010 [0056.934] GetCurrentObject (hdc=0x1010815, type=0x7) returned 0x1405068c [0056.934] GetCurrentObject (hdc=0x1010815, type=0x6) returned 0x18a002e [0056.934] SaveDC (hdc=0x1010815) returned 1 [0056.935] GetNearestColor (hdc=0x1010815, color=0x80) returned 0x80 [0057.052] CreateSolidBrush (color=0x80) returned 0x2f1007f1 [0057.052] FillRect (hDC=0x1010815, lprc=0x1ad278, hbr=0x2f1007f1) returned 1 [0057.053] DeleteObject (ho=0x2f1007f1) returned 1 [0057.055] RestoreDC (hdc=0x1010815, nSavedDC=-1) returned 1 [0057.057] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1ad868 | out: lpwndpl=0x1ad868) returned 1 [0057.057] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x47, wParam=0x0, lParam=0x1adc90) returned 0x0 [0057.057] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad700 | out: lpRect=0x1ad700) returned 1 [0057.057] GetWindowRect (in: hWnd=0x401a8, lpRect=0x1ad700 | out: lpRect=0x1ad700) returned 1 [0057.058] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x83, wParam=0x1, lParam=0x1ad5f0) returned 0x0 [0057.060] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0057.062] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1ad218 | out: lpwndpl=0x1ad218) returned 1 [0057.062] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad130 | out: lpRect=0x1ad130) returned 1 [0057.062] GetWindowTextLengthW (hWnd=0x401a8) returned 5 [0057.062] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0057.062] GetSystemMetrics (nIndex=42) returned 0 [0057.062] GetWindowTextW (in: hWnd=0x401a8, lpString=0x1acea0, nMaxCount=6 | out: lpString="Form1") returned 5 [0057.062] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xd, wParam=0x6, lParam=0x1acea0) returned 0x5 [0057.062] GetClientRect (in: hWnd=0x401a8, lpRect=0x1acf18 | out: lpRect=0x1acf18) returned 1 [0057.062] GetCurrentObject (hdc=0x3010807, type=0x1) returned 0x1b00017 [0057.062] GetCurrentObject (hdc=0x3010807, type=0x2) returned 0x1900010 [0057.062] GetCurrentObject (hdc=0x3010807, type=0x7) returned 0x1405068c [0057.062] GetCurrentObject (hdc=0x3010807, type=0x6) returned 0x18a002e [0057.062] SaveDC (hdc=0x3010807) returned 1 [0057.062] GetNearestColor (hdc=0x3010807, color=0x80) returned 0x80 [0057.062] CreateSolidBrush (color=0x80) returned 0x301007f1 [0057.062] FillRect (hDC=0x3010807, lprc=0x1acc08, hbr=0x301007f1) returned 1 [0057.062] DeleteObject (ho=0x301007f1) returned 1 [0057.062] RestoreDC (hdc=0x3010807, nSavedDC=-1) returned 1 [0057.067] SetWindowLongPtrW (hWnd=0x401a8, nIndex=-8, dwNewLong=0x301ac) returned 0x301ac [0057.067] SendMessageW (hWnd=0x301ac, Msg=0x80, wParam=0x1, lParam=0xb00df) returned 0x0 [0057.067] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ac, Msg=0x80, wParam=0x1, lParam=0xb00df) returned 0x0 [0057.068] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ac, Msg=0xd, wParam=0x104, lParam=0x1a5f48b0) returned 0x0 [0057.068] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x301ac, Msg=0xd, wParam=0x104, lParam=0x1a5f48b0) returned 0x0 [0057.068] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0057.068] GetWindowLongPtrW (hWnd=0x401a8, nIndex=-16) returned 0x16cf0000 [0057.068] GetWindowTextLengthW (hWnd=0x401a8) returned 5 [0057.068] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0057.068] GetSystemMetrics (nIndex=42) returned 0 [0057.068] GetWindowTextW (in: hWnd=0x401a8, lpString=0x1adb40, nMaxCount=6 | out: lpString="Form1") returned 5 [0057.069] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xd, wParam=0x6, lParam=0x1adb40) returned 0x5 [0057.069] GetWindowTextLengthW (hWnd=0x401a8) returned 5 [0057.069] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0057.069] GetSystemMetrics (nIndex=42) returned 0 [0057.069] GetWindowTextW (in: hWnd=0x401a8, lpString=0x1adb40, nMaxCount=6 | out: lpString="Form1") returned 5 [0057.069] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xd, wParam=0x6, lParam=0x1adb40) returned 0x5 [0057.069] GetWindowLongPtrW (hWnd=0x401a8, nIndex=-16) returned 0x16cf0000 [0057.069] GetWindowLongPtrW (hWnd=0x401a8, nIndex=-20) returned 0x90100 [0057.069] SetWindowLongPtrW (hWnd=0x401a8, nIndex=-16, dwNewLong=0x12cf0000) returned 0x16cf0000 [0057.069] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1adc10) returned 0x0 [0057.069] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1adc10) returned 0x0 [0057.069] SetWindowLongPtrW (hWnd=0x401a8, nIndex=-20, dwNewLong=0x90000) returned 0x90100 [0057.070] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x1adc10) returned 0x0 [0057.070] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x1adc10) returned 0x0 [0057.070] SetWindowPos (hWnd=0x401a8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0057.070] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x46, wParam=0x0, lParam=0x1adc60) returned 0x0 [0057.070] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x83, wParam=0x1, lParam=0x1adc30) returned 0x0 [0057.072] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0057.074] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1ad858 | out: lpwndpl=0x1ad858) returned 1 [0057.074] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad770 | out: lpRect=0x1ad770) returned 1 [0057.074] GetWindowTextLengthW (hWnd=0x401a8) returned 5 [0057.074] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0057.074] GetSystemMetrics (nIndex=42) returned 0 [0057.074] GetWindowTextW (in: hWnd=0x401a8, lpString=0x1ad4e0, nMaxCount=6 | out: lpString="Form1") returned 5 [0057.074] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xd, wParam=0x6, lParam=0x1ad4e0) returned 0x5 [0057.074] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad558 | out: lpRect=0x1ad558) returned 1 [0057.074] GetCurrentObject (hdc=0x1010815, type=0x1) returned 0x1b00017 [0057.074] GetCurrentObject (hdc=0x1010815, type=0x2) returned 0x1900010 [0057.074] GetCurrentObject (hdc=0x1010815, type=0x7) returned 0x1405068c [0057.074] GetCurrentObject (hdc=0x1010815, type=0x6) returned 0x18a002e [0057.074] SaveDC (hdc=0x1010815) returned 1 [0057.074] GetNearestColor (hdc=0x1010815, color=0x80) returned 0x80 [0057.075] CreateSolidBrush (color=0x80) returned 0x311007f1 [0057.075] FillRect (hDC=0x1010815, lprc=0x1ad248, hbr=0x311007f1) returned 1 [0057.075] DeleteObject (ho=0x311007f1) returned 1 [0057.075] RestoreDC (hdc=0x1010815, nSavedDC=-1) returned 1 [0057.075] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1ad838 | out: lpwndpl=0x1ad838) returned 1 [0057.075] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x47, wParam=0x0, lParam=0x1adc60) returned 0x0 [0057.075] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad6d0 | out: lpRect=0x1ad6d0) returned 1 [0057.075] GetWindowRect (in: hWnd=0x401a8, lpRect=0x1ad6d0 | out: lpRect=0x1ad6d0) returned 1 [0057.075] RedrawWindow (hWnd=0x401a8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0057.075] GetSystemMenu (hWnd=0x401a8, bRevert=0) returned 0x1201b1 [0057.075] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1adcd8 | out: lpwndpl=0x1adcd8) returned 1 [0057.075] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0057.075] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0057.076] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0057.076] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0057.076] EnableMenuItem (hMenu=0x1201b1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0057.076] SetParent (hWndChild=0x301aa, hWndNewParent=0x401a8) returned 0x301ae [0057.076] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0057.076] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x46, wParam=0x0, lParam=0x1add70) returned 0x0 [0057.076] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0057.076] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x47, wParam=0x0, lParam=0x1add70) returned 0x0 [0057.076] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x3, wParam=0x0, lParam=0x9000c) returned 0x0 [0057.076] GetClientRect (in: hWnd=0x301aa, lpRect=0x1acdc0 | out: lpRect=0x1acdc0) returned 1 [0057.076] GetWindowRect (in: hWnd=0x301aa, lpRect=0x1acdc0 | out: lpRect=0x1acdc0) returned 1 [0057.076] GetParent (hWnd=0x301aa) returned 0x401a8 [0057.076] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401a8, lpPoints=0x1acdc0, cPoints=0x2 | out: lpPoints=0x1acdc0) returned -6815827 [0057.077] GetClientRect (in: hWnd=0x301aa, lpRect=0x1ad7a0 | out: lpRect=0x1ad7a0) returned 1 [0057.077] GetWindowRect (in: hWnd=0x301aa, lpRect=0x1ad7a0 | out: lpRect=0x1ad7a0) returned 1 [0057.077] GetParent (hWnd=0x301aa) returned 0x401a8 [0057.077] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401a8, lpPoints=0x1ad7a0, cPoints=0x2 | out: lpPoints=0x1ad7a0) returned -6815827 [0057.077] GetParent (hWnd=0x301aa) returned 0x401a8 [0057.077] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0057.077] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x46, wParam=0x0, lParam=0x1add70) returned 0x0 [0057.077] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1ad968 | out: lpwndpl=0x1ad968) returned 1 [0057.077] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad880 | out: lpRect=0x1ad880) returned 1 [0057.077] GetWindowTextLengthW (hWnd=0x401a8) returned 5 [0057.077] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0057.077] GetSystemMetrics (nIndex=42) returned 0 [0057.077] GetWindowTextW (in: hWnd=0x401a8, lpString=0x1ad5f0, nMaxCount=6 | out: lpString="Form1") returned 5 [0057.077] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xd, wParam=0x6, lParam=0x1ad5f0) returned 0x5 [0057.078] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad668 | out: lpRect=0x1ad668) returned 1 [0057.078] GetCurrentObject (hdc=0x1010815, type=0x1) returned 0x1b00017 [0057.078] GetCurrentObject (hdc=0x1010815, type=0x2) returned 0x1900010 [0057.078] GetCurrentObject (hdc=0x1010815, type=0x7) returned 0x1405068c [0057.078] GetCurrentObject (hdc=0x1010815, type=0x6) returned 0x18a002e [0057.078] SaveDC (hdc=0x1010815) returned 1 [0057.078] GetNearestColor (hdc=0x1010815, color=0x80) returned 0x80 [0057.078] CreateSolidBrush (color=0x80) returned 0x321007f1 [0057.078] FillRect (hDC=0x1010815, lprc=0x1ad358, hbr=0x321007f1) returned 1 [0057.078] DeleteObject (ho=0x321007f1) returned 1 [0057.078] RestoreDC (hdc=0x1010815, nSavedDC=-1) returned 1 [0057.078] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0057.079] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x47, wParam=0x0, lParam=0x1add70) returned 0x0 [0057.079] GetClientRect (in: hWnd=0x301aa, lpRect=0x1ad7a0 | out: lpRect=0x1ad7a0) returned 1 [0057.079] GetWindowRect (in: hWnd=0x301aa, lpRect=0x1ad7a0 | out: lpRect=0x1ad7a0) returned 1 [0057.079] GetParent (hWnd=0x301aa) returned 0x401a8 [0057.079] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401a8, lpPoints=0x1ad7a0, cPoints=0x2 | out: lpPoints=0x1ad7a0) returned -6815827 [0057.079] GetParent (hWnd=0x301aa) returned 0x401a8 [0057.079] GetWindow (hWnd=0x301aa, uCmd=0x3) returned 0x0 [0057.079] GetFocus () returned 0x0 [0057.079] GetParent (hWnd=0x301aa) returned 0x401a8 [0057.079] GetWindowLongPtrW (hWnd=0x301aa, nIndex=-20) returned 0x0 [0057.079] DestroyWindow (hWnd=0x301aa) returned 1 [0057.079] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0057.079] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0x210, wParam=0x1aa0002, lParam=0x301aa) returned 0x0 [0057.079] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0057.079] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x46, wParam=0x0, lParam=0x1adae0) returned 0x0 [0057.080] GetWindowPlacement (in: hWnd=0x401a8, lpwndpl=0x1ad6d8 | out: lpwndpl=0x1ad6d8) returned 1 [0057.080] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad5f0 | out: lpRect=0x1ad5f0) returned 1 [0057.080] GetWindowTextLengthW (hWnd=0x401a8) returned 5 [0057.080] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0057.080] GetSystemMetrics (nIndex=42) returned 0 [0057.080] GetWindowTextW (in: hWnd=0x401a8, lpString=0x1ad360, nMaxCount=6 | out: lpString="Form1") returned 5 [0057.080] CallWindowProcW (lpPrevWndFunc=0x7769b0ac, hWnd=0x401a8, Msg=0xd, wParam=0x6, lParam=0x1ad360) returned 0x5 [0057.081] GetClientRect (in: hWnd=0x401a8, lpRect=0x1ad3d8 | out: lpRect=0x1ad3d8) returned 1 [0057.081] GetCurrentObject (hdc=0x120107ff, type=0x1) returned 0x1b00017 [0057.081] GetCurrentObject (hdc=0x120107ff, type=0x2) returned 0x1900010 [0057.081] GetCurrentObject (hdc=0x120107ff, type=0x7) returned 0x1405068c [0057.081] GetCurrentObject (hdc=0x120107ff, type=0x6) returned 0x18a002e [0057.081] SaveDC (hdc=0x120107ff) returned 1 [0057.081] GetNearestColor (hdc=0x120107ff, color=0x80) returned 0x80 [0057.081] CreateSolidBrush (color=0x80) returned 0x331007f1 [0057.081] FillRect (hDC=0x120107ff, lprc=0x1ad0c8, hbr=0x331007f1) returned 1 [0057.081] DeleteObject (ho=0x331007f1) returned 1 [0057.081] RestoreDC (hdc=0x120107ff, nSavedDC=-1) returned 1 [0057.081] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x47, wParam=0x0, lParam=0x1adae0) returned 0x0 [0057.081] GetClientRect (in: hWnd=0x301aa, lpRect=0x1ad510 | out: lpRect=0x1ad510) returned 1 [0057.081] GetWindowRect (in: hWnd=0x301aa, lpRect=0x1ad510 | out: lpRect=0x1ad510) returned 1 [0057.082] GetParent (hWnd=0x301aa) returned 0x401a8 [0057.082] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401a8, lpPoints=0x1ad510, cPoints=0x2 | out: lpPoints=0x1ad510) returned -6815827 [0057.082] GetParent (hWnd=0x301aa) returned 0x401a8 [0057.082] GetWindowTextLengthW (hWnd=0x301aa) returned 23 [0057.082] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0057.082] GetSystemMetrics (nIndex=42) returned 0 [0057.082] GetWindowTextW (in: hWnd=0x301aa, lpString=0x1ad360, nMaxCount=24 | out: lpString="You shouldn't done that") returned 23 [0057.082] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0xd, wParam=0x18, lParam=0x1ad360) returned 0x17 [0057.082] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0057.082] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x301aa, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0057.083] GetCurrentActCtx (in: lphActCtx=0x1adc70 | out: lphActCtx=0x1adc70*=0x1085ea8) returned 1 [0057.084] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc0f0000 [0057.084] GetModuleHandleW (lpModuleName=0x0) returned 0x11b0000 [0057.084] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="You shouldn't done that", dwStyle=0x5600000d, X=12, Y=9, nWidth=201, nHeight=20, hWndParent=0x401a8, hMenu=0x0, hInstance=0x11b0000, lpParam=0x0) returned 0x401aa [0057.084] SetWindowLongPtrW (hWnd=0x401aa, nIndex=-4, dwNewLong=0x7fefc1961b4) returned 0x1af914ac [0057.084] GetWindowLongPtrW (hWnd=0x401aa, nIndex=-4) returned 0x7fefc1961b4 [0057.084] SetWindowLongPtrW (hWnd=0x401aa, nIndex=-4, dwNewLong=0x1af9172c) returned 0x7fefc1961b4 [0057.084] GetWindowLongPtrW (hWnd=0x401aa, nIndex=-4) returned 0x1af9172c [0057.084] GetWindowLongPtrW (hWnd=0x401aa, nIndex=-16) returned 0x4600000d [0057.084] GetWindowLongPtrW (hWnd=0x401aa, nIndex=-12) returned 0x0 [0057.084] SetWindowLongPtrW (hWnd=0x401aa, nIndex=-12, dwNewLong=0x401aa) returned 0x0 [0057.085] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x81, wParam=0x0, lParam=0x1ad330) returned 0x1 [0057.085] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x83, wParam=0x0, lParam=0x1ad3e0) returned 0x0 [0057.086] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x1, wParam=0x0, lParam=0x1ad2f0) returned 0x0 [0057.086] GetWindow (hWnd=0x401aa, uCmd=0x3) returned 0x0 [0057.086] GetClientRect (in: hWnd=0x401aa, lpRect=0x1acd30 | out: lpRect=0x1acd30) returned 1 [0057.086] GetWindowRect (in: hWnd=0x401aa, lpRect=0x1acd30 | out: lpRect=0x1acd30) returned 1 [0057.086] GetParent (hWnd=0x401aa) returned 0x401a8 [0057.086] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401a8, lpPoints=0x1acd30, cPoints=0x2 | out: lpPoints=0x1acd30) returned -6815827 [0057.086] SetWindowTextW (hWnd=0x401aa, lpString="You shouldn't done that") returned 1 [0057.086] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0xc, wParam=0x0, lParam=0x25d846c) returned 0x1 [0057.087] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x5, wParam=0x0, lParam=0x1400c9) returned 0x0 [0057.087] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x3, wParam=0x0, lParam=0x9000c) returned 0x0 [0057.087] GetClientRect (in: hWnd=0x401aa, lpRect=0x1ace80 | out: lpRect=0x1ace80) returned 1 [0057.087] GetWindowRect (in: hWnd=0x401aa, lpRect=0x1ace80 | out: lpRect=0x1ace80) returned 1 [0057.087] GetParent (hWnd=0x401aa) returned 0x401a8 [0057.087] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401a8, lpPoints=0x1ace80, cPoints=0x2 | out: lpPoints=0x1ace80) returned -6815827 [0057.087] SendMessageW (hWnd=0x401aa, Msg=0x2210, wParam=0x1aa0001, lParam=0x401aa) returned 0x0 [0057.087] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x2210, wParam=0x1aa0001, lParam=0x401aa) returned 0x0 [0057.087] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0057.087] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x46, wParam=0x0, lParam=0x1ad3c0) returned 0x0 [0057.087] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0057.088] CallWindowProcW (lpPrevWndFunc=0x7fefc1961b4, hWnd=0x401aa, Msg=0x47, wParam=0x0, lParam=0x1ad3c0) returned 0x0 [0057.088] GetClientRect (in: hWnd=0x401aa, lpRect=0x1acdf0 | out: lpRect=0x1acdf0) returned 1 [0057.088] GetWindowRect (in: hWnd=0x401aa, lpRect=0x1acdf0 | out: lpRect=0x1acdf0) returned 1 [0057.088] GetParent (hWnd=0x401aa) returned 0x401a8 [0057.088] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401a8, lpPoints=0x1acdf0, cPoints=0x2 | out: lpPoints=0x1acdf0) returned -6815827 [0057.088] GetParent (hWnd=0x401aa) returned 0x401a8 [0057.088] GetParent (hWnd=0x401aa) returned 0x401a8 [0057.089] GetParent (hWnd=0x401aa) returned 0x401a8 [0057.875] GetLogicalDrives () returned 0x4 [0058.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf30) returned 1 [0058.255] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ada20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0058.256] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ad9c0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0058.262] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x1adbd0 | out: lpFindFileData=0x1adbd0) returned 0x2e0540 [0058.264] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.265] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.265] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.265] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.265] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.265] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.266] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.266] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.266] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.266] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.267] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.267] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.267] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.267] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.267] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.268] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 0 [0058.268] FindClose (in: hFindFile=0x2e0540 | out: hFindFile=0x2e0540) returned 1 [0058.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade80) returned 1 [0058.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade40) returned 1 [0058.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adf30) returned 1 [0058.268] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ada20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0058.268] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ad9c0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0058.268] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x1adbd0 | out: lpFindFileData=0x1adbd0) returned 0x2e0540 [0058.288] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.288] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.288] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.288] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.288] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.288] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.289] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.289] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.289] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.289] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.289] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.289] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.289] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.290] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.290] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.290] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 1 [0058.290] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adc20 | out: lpFindFileData=0x1adc20) returned 0 [0058.290] FindClose (in: hFindFile=0x2e0540 | out: hFindFile=0x2e0540) returned 1 [0058.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade80) returned 1 [0058.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade40) returned 1 [0058.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0058.305] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0058.305] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0058.305] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0540 [0058.306] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0058.306] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0058.306] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0058.306] FindClose (in: hFindFile=0x2e0540 | out: hFindFile=0x2e0540) returned 1 [0058.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0058.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0058.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0058.306] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0058.306] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0058.306] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0540 [0058.307] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0058.307] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0058.307] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0058.307] FindClose (in: hFindFile=0x2e0540 | out: hFindFile=0x2e0540) returned 1 [0058.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0058.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0058.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0058.307] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0058.307] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x3f [0058.308] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0540 [0058.308] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0058.308] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0058.308] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0058.308] FindClose (in: hFindFile=0x2e0540 | out: hFindFile=0x2e0540) returned 1 [0058.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0058.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0058.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0058.308] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0058.308] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x3f [0058.309] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0540 [0058.309] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0058.309] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0058.310] FindNextFileW (in: hFindFile=0x2e0540, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0058.310] FindClose (in: hFindFile=0x2e0540 | out: hFindFile=0x2e0540) returned 1 [0058.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0058.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0058.440] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0058.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0058.441] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x220 [0058.442] GetFileType (hFile=0x220) returned 0x1 [0058.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0058.442] GetFileType (hFile=0x220) returned 0x1 [0058.470] WriteFile (in: hFile=0x220, lpBuffer=0x25ec470*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x25ec470*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0058.471] CloseHandle (hObject=0x220) returned 1 [0058.543] EtwEventRegister (in: ProviderId=0x25eda60, EnableCallback=0x1af9177c, CallbackContext=0x0, RegHandle=0x25eda40 | out: RegHandle=0x25eda40) returned 0x0 [0058.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cerber Ransomware Source.exe.config", nBufferLength=0x105, lpBuffer=0x1ad5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cerber Ransomware Source.exe.config", lpFilePart=0x0) returned 0x49 [0058.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaa0) returned 1 [0058.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Cerber Ransomware Source.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cerber ransomware source.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1adb80 | out: lpFileInformation=0x1adb80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0058.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0059.077] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0059.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.078] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.078] GetFileType (hFile=0x228) returned 0x1 [0059.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.078] GetFileType (hFile=0x228) returned 0x1 [0059.078] WriteFile (in: hFile=0x228, lpBuffer=0x25f1018*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x25f1018*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0059.083] CloseHandle (hObject=0x228) returned 1 [0059.087] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0059.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.087] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.087] GetFileType (hFile=0x228) returned 0x1 [0059.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.087] GetFileType (hFile=0x228) returned 0x1 [0059.088] WriteFile (in: hFile=0x228, lpBuffer=0x25f7d30*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x25f7d30*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.088] CloseHandle (hObject=0x228) returned 1 [0059.094] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\ENYBENY.TXT", lpFilePart=0x0) returned 0x1b [0059.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0059.095] CreateFileW (lpFileName="C:\\$Recycle.Bin\\ENYBENY.TXT" (normalized: "c:\\$recycle.bin\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.096] GetFileType (hFile=0x228) returned 0x1 [0059.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0059.096] GetFileType (hFile=0x228) returned 0x1 [0059.097] WriteFile (in: hFile=0x228, lpBuffer=0x26020a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x26020a8*, lpNumberOfBytesWritten=0x1add98*=0x394, lpOverlapped=0x0) returned 1 [0059.098] CloseHandle (hObject=0x228) returned 1 [0059.099] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad8d0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\ENYBENY.png", lpFilePart=0x0) returned 0x1b [0059.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0059.099] CreateFileW (lpFileName="C:\\$Recycle.Bin\\ENYBENY.png" (normalized: "c:\\$recycle.bin\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.099] GetFileType (hFile=0x228) returned 0x1 [0059.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add20) returned 1 [0059.099] GetFileType (hFile=0x228) returned 0x1 [0059.099] WriteFile (in: hFile=0x228, lpBuffer=0x2603110*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1aded8, lpOverlapped=0x0 | out: lpBuffer=0x2603110*, lpNumberOfBytesWritten=0x1aded8*=0x50df, lpOverlapped=0x0) returned 1 [0059.101] CloseHandle (hObject=0x228) returned 1 [0059.101] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x46 [0059.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0059.101] CreateFileW (lpFileName="C:\\$Recycle.Bin\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\$recycle.bin\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.103] GetFileType (hFile=0x228) returned 0x1 [0059.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0059.103] GetFileType (hFile=0x228) returned 0x1 [0059.103] WriteFile (in: hFile=0x228, lpBuffer=0x2609c68*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x2609c68*, lpNumberOfBytesWritten=0x1add98*=0xc6, lpOverlapped=0x0) returned 1 [0059.104] CloseHandle (hObject=0x228) returned 1 [0059.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0059.104] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0059.104] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0059.104] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0780 [0059.105] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.105] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.105] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.105] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.105] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.105] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.106] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.106] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.106] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.106] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.106] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.106] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.106] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.107] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.107] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.107] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.107] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.107] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.107] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.108] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.108] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.108] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.108] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.108] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.108] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.110] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0059.110] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0059.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0059.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0059.110] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0059.110] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0059.110] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0780 [0059.110] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.111] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.111] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.111] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.111] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.111] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.111] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0059.115] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0059.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0059.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.115] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0059.115] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0059.115] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.116] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.116] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.116] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.116] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.116] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0059.117] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0059.117] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.117] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.117] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.117] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.117] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.119] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.119] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\ENYBENY.TXT" (normalized: "c:\\boot\\cs-cz\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.120] GetFileType (hFile=0x228) returned 0x1 [0059.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.120] GetFileType (hFile=0x228) returned 0x1 [0059.120] WriteFile (in: hFile=0x228, lpBuffer=0x261a958*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x261a958*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.121] CloseHandle (hObject=0x228) returned 1 [0059.122] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.122] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\ENYBENY.png" (normalized: "c:\\boot\\cs-cz\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.123] GetFileType (hFile=0x228) returned 0x1 [0059.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.123] GetFileType (hFile=0x228) returned 0x1 [0059.123] WriteFile (in: hFile=0x228, lpBuffer=0x261b9c0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x261b9c0*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0059.124] CloseHandle (hObject=0x228) returned 1 [0059.125] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.125] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\cs-cz\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.136] GetFileType (hFile=0x228) returned 0x1 [0059.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.136] GetFileType (hFile=0x228) returned 0x1 [0059.137] WriteFile (in: hFile=0x228, lpBuffer=0x2622518*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2622518*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.138] CloseHandle (hObject=0x228) returned 1 [0059.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.138] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0059.138] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0059.139] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.139] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.139] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.139] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.139] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.140] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0059.140] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0059.140] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.140] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.140] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.140] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.140] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.141] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.141] CreateFileW (lpFileName="C:\\Boot\\da-DK\\ENYBENY.TXT" (normalized: "c:\\boot\\da-dk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.141] GetFileType (hFile=0x228) returned 0x1 [0059.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.141] GetFileType (hFile=0x228) returned 0x1 [0059.142] WriteFile (in: hFile=0x228, lpBuffer=0x262e168*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x262e168*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.143] CloseHandle (hObject=0x228) returned 1 [0059.144] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.144] CreateFileW (lpFileName="C:\\Boot\\da-DK\\ENYBENY.png" (normalized: "c:\\boot\\da-dk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.145] GetFileType (hFile=0x228) returned 0x1 [0059.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.145] GetFileType (hFile=0x228) returned 0x1 [0059.145] WriteFile (in: hFile=0x228, lpBuffer=0x262f1d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x262f1d0*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0059.146] CloseHandle (hObject=0x228) returned 1 [0059.147] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.147] CreateFileW (lpFileName="C:\\Boot\\da-DK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\da-dk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.148] GetFileType (hFile=0x228) returned 0x1 [0059.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.149] GetFileType (hFile=0x228) returned 0x1 [0059.149] WriteFile (in: hFile=0x228, lpBuffer=0x2635d28*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2635d28*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.150] CloseHandle (hObject=0x228) returned 1 [0059.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.150] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0059.150] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0059.150] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.151] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.152] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.152] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.152] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.152] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0059.152] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0059.152] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.152] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.153] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.153] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.153] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.153] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.153] CreateFileW (lpFileName="C:\\Boot\\de-DE\\ENYBENY.TXT" (normalized: "c:\\boot\\de-de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.154] GetFileType (hFile=0x228) returned 0x1 [0059.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.154] GetFileType (hFile=0x228) returned 0x1 [0059.154] WriteFile (in: hFile=0x228, lpBuffer=0x2641978*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2641978*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.156] CloseHandle (hObject=0x228) returned 1 [0059.156] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.156] CreateFileW (lpFileName="C:\\Boot\\de-DE\\ENYBENY.png" (normalized: "c:\\boot\\de-de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.159] GetFileType (hFile=0x228) returned 0x1 [0059.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.159] GetFileType (hFile=0x228) returned 0x1 [0059.159] WriteFile (in: hFile=0x228, lpBuffer=0x26429e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26429e0*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0059.161] CloseHandle (hObject=0x228) returned 1 [0059.161] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.161] CreateFileW (lpFileName="C:\\Boot\\de-DE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\de-de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.163] GetFileType (hFile=0x228) returned 0x1 [0059.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.164] GetFileType (hFile=0x228) returned 0x1 [0059.164] WriteFile (in: hFile=0x228, lpBuffer=0x2649538*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2649538*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.165] CloseHandle (hObject=0x228) returned 1 [0059.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.165] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0059.165] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0059.166] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.166] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.166] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.166] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.167] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.167] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0059.167] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0059.167] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.167] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.167] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.168] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.169] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.169] CreateFileW (lpFileName="C:\\Boot\\el-GR\\ENYBENY.TXT" (normalized: "c:\\boot\\el-gr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.169] GetFileType (hFile=0x228) returned 0x1 [0059.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.169] GetFileType (hFile=0x228) returned 0x1 [0059.170] WriteFile (in: hFile=0x228, lpBuffer=0x2655188*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2655188*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.171] CloseHandle (hObject=0x228) returned 1 [0059.172] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.172] CreateFileW (lpFileName="C:\\Boot\\el-GR\\ENYBENY.png" (normalized: "c:\\boot\\el-gr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.172] GetFileType (hFile=0x228) returned 0x1 [0059.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.172] GetFileType (hFile=0x228) returned 0x1 [0059.172] WriteFile (in: hFile=0x228, lpBuffer=0x26561f0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26561f0*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0059.174] CloseHandle (hObject=0x228) returned 1 [0059.174] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.174] CreateFileW (lpFileName="C:\\Boot\\el-GR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\el-gr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.188] GetFileType (hFile=0x228) returned 0x1 [0059.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.188] GetFileType (hFile=0x228) returned 0x1 [0059.188] WriteFile (in: hFile=0x228, lpBuffer=0x265cd48*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x265cd48*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.189] CloseHandle (hObject=0x228) returned 1 [0059.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.189] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0059.189] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0059.189] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.191] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.191] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0059.191] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0059.192] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.192] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.192] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.193] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.193] CreateFileW (lpFileName="C:\\Boot\\en-US\\ENYBENY.TXT" (normalized: "c:\\boot\\en-us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.198] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.198] CreateFileW (lpFileName="C:\\Boot\\en-US\\ENYBENY.png" (normalized: "c:\\boot\\en-us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.200] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.200] CreateFileW (lpFileName="C:\\Boot\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\en-us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.215] WriteFile (in: hFile=0x228, lpBuffer=0x2670868*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2670868*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.217] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0059.217] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0059.218] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.221] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.221] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.221] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.221] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.222] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0059.222] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0059.222] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.222] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.222] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.222] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.222] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.223] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.223] CreateFileW (lpFileName="C:\\Boot\\es-ES\\ENYBENY.TXT" (normalized: "c:\\boot\\es-es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.226] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.226] CreateFileW (lpFileName="C:\\Boot\\es-ES\\ENYBENY.png" (normalized: "c:\\boot\\es-es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.229] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.229] CreateFileW (lpFileName="C:\\Boot\\es-ES\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\es-es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.233] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0059.233] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0059.234] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.234] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.234] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.235] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.235] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.235] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0059.235] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0059.235] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.236] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.236] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.236] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.236] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.237] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.237] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\ENYBENY.TXT" (normalized: "c:\\boot\\fi-fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.240] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.241] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\ENYBENY.png" (normalized: "c:\\boot\\fi-fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.243] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.243] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\fi-fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.248] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0059.248] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0059.248] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.250] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.250] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.250] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.250] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.250] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.250] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.251] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.251] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.251] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0059.252] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0059.252] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.252] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.252] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.252] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.252] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.252] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.253] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.253] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.253] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.254] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.254] CreateFileW (lpFileName="C:\\Boot\\Fonts\\ENYBENY.TXT" (normalized: "c:\\boot\\fonts\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.260] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.260] CreateFileW (lpFileName="C:\\Boot\\Fonts\\ENYBENY.png" (normalized: "c:\\boot\\fonts\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.262] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.262] CreateFileW (lpFileName="C:\\Boot\\Fonts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\fonts\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.264] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0059.264] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0059.264] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.265] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.265] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.265] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0059.266] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0059.266] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.266] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.266] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.266] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.266] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.267] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.267] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\ENYBENY.TXT" (normalized: "c:\\boot\\fr-fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.269] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.269] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\ENYBENY.png" (normalized: "c:\\boot\\fr-fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.271] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.271] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\fr-fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.322] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0059.322] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0059.322] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.323] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.323] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0059.323] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0059.323] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.324] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.325] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.325] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\ENYBENY.TXT" (normalized: "c:\\boot\\hu-hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.326] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.326] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\ENYBENY.png" (normalized: "c:\\boot\\hu-hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.329] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.329] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\hu-hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.337] WriteFile (in: hFile=0x228, lpBuffer=0x26d2af0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26d2af0*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.338] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0059.339] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0059.339] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.340] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.340] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.340] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.340] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.340] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0059.340] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0059.340] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.340] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.340] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.340] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.340] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.341] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.341] CreateFileW (lpFileName="C:\\Boot\\it-IT\\ENYBENY.TXT" (normalized: "c:\\boot\\it-it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.346] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.346] CreateFileW (lpFileName="C:\\Boot\\it-IT\\ENYBENY.png" (normalized: "c:\\boot\\it-it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.348] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.348] CreateFileW (lpFileName="C:\\Boot\\it-IT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\it-it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.354] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0059.354] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0059.354] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.355] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.355] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.355] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.355] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.355] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0059.355] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0059.355] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.355] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.356] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.356] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.356] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.356] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.356] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\ENYBENY.TXT" (normalized: "c:\\boot\\ja-jp\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.357] WriteFile (in: hFile=0x228, lpBuffer=0x26f1f50*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26f1f50*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.359] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.359] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\ENYBENY.png" (normalized: "c:\\boot\\ja-jp\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.361] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.361] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\ja-jp\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.370] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0059.370] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0059.370] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.371] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.371] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.371] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.371] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.371] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0059.372] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0059.372] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.372] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.372] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.373] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.373] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\ENYBENY.TXT" (normalized: "c:\\boot\\ko-kr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.376] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.376] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\ENYBENY.png" (normalized: "c:\\boot\\ko-kr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.377] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.377] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\ko-kr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.381] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0059.381] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0059.381] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.381] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.381] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.382] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.382] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.382] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0059.382] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0059.382] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.382] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.382] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.382] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.382] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.383] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.383] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\ENYBENY.TXT" (normalized: "c:\\boot\\nb-no\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.385] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.385] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\ENYBENY.png" (normalized: "c:\\boot\\nb-no\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.388] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.388] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\nb-no\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.390] WriteFile (in: hFile=0x228, lpBuffer=0x2720b30*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2720b30*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.392] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0059.392] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0059.392] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.393] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.393] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0059.393] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0059.393] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.394] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.394] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.394] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\ENYBENY.TXT" (normalized: "c:\\boot\\nl-nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.397] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.397] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\ENYBENY.png" (normalized: "c:\\boot\\nl-nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.399] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.399] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\nl-nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.402] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0059.403] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0059.403] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.403] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.403] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.403] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0059.404] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0059.404] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.404] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.404] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.404] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.404] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\ENYBENY.TXT" (normalized: "c:\\boot\\pl-pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.407] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.407] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\ENYBENY.png" (normalized: "c:\\boot\\pl-pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.409] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.409] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\pl-pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.412] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0059.412] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0059.412] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.413] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.414] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.414] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0059.414] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0059.414] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.414] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.414] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.415] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.415] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\ENYBENY.TXT" (normalized: "c:\\boot\\pt-br\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.421] WriteFile (in: hFile=0x228, lpBuffer=0x27537a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27537a0*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.422] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.422] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\ENYBENY.png" (normalized: "c:\\boot\\pt-br\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.424] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.424] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\pt-br\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.432] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0059.432] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0059.432] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.432] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.432] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.433] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0059.433] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0059.433] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.433] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.433] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.433] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.433] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.434] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.434] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\ENYBENY.TXT" (normalized: "c:\\boot\\pt-pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.436] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.436] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\ENYBENY.png" (normalized: "c:\\boot\\pt-pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.438] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.438] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\pt-pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.441] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0059.441] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0059.441] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.442] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.442] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.442] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.443] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.443] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0059.443] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0059.443] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.443] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.443] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.443] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.443] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.444] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.444] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\ENYBENY.TXT" (normalized: "c:\\boot\\ru-ru\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.446] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.446] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\ENYBENY.png" (normalized: "c:\\boot\\ru-ru\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.448] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.448] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\ru-ru\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.469] WriteFile (in: hFile=0x228, lpBuffer=0x2782380*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2782380*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.471] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0059.471] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0059.471] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.471] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.472] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.472] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.472] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.472] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0059.472] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0059.472] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.473] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.473] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.473] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.473] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.474] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.474] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\ENYBENY.TXT" (normalized: "c:\\boot\\sv-se\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.480] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.480] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\ENYBENY.png" (normalized: "c:\\boot\\sv-se\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.488] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.488] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\sv-se\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.494] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0059.494] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0059.494] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.495] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.496] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.496] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0059.496] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0059.496] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.496] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.496] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.496] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.496] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.497] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.497] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\ENYBENY.TXT" (normalized: "c:\\boot\\tr-tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.499] WriteFile (in: hFile=0x228, lpBuffer=0x27a17e0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27a17e0*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.500] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.500] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\ENYBENY.png" (normalized: "c:\\boot\\tr-tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.502] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.502] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\tr-tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.506] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0059.506] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0059.506] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.506] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.507] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.507] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.507] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.507] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0059.507] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0059.507] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.507] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.507] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.507] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.507] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.508] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.509] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\ENYBENY.TXT" (normalized: "c:\\boot\\zh-cn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.510] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.510] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\ENYBENY.png" (normalized: "c:\\boot\\zh-cn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.513] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.513] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\zh-cn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.526] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0059.526] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0059.526] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.527] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.527] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.528] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.528] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.528] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0059.528] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0059.528] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.528] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.528] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.528] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.529] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.579] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.579] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\ENYBENY.TXT" (normalized: "c:\\boot\\zh-hk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.581] GetFileType (hFile=0x228) returned 0x1 [0059.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.581] GetFileType (hFile=0x228) returned 0x1 [0059.582] WriteFile (in: hFile=0x228, lpBuffer=0x25dd398*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x25dd398*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.583] CloseHandle (hObject=0x228) returned 1 [0059.583] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.583] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\ENYBENY.png" (normalized: "c:\\boot\\zh-hk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.584] GetFileType (hFile=0x228) returned 0x1 [0059.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.584] GetFileType (hFile=0x228) returned 0x1 [0059.584] WriteFile (in: hFile=0x228, lpBuffer=0x25de400*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x25de400*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0059.585] CloseHandle (hObject=0x228) returned 1 [0059.585] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.586] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\zh-hk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.596] GetFileType (hFile=0x228) returned 0x1 [0059.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.596] GetFileType (hFile=0x228) returned 0x1 [0059.596] WriteFile (in: hFile=0x228, lpBuffer=0x25e4f58*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x25e4f58*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.597] CloseHandle (hObject=0x228) returned 1 [0059.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.597] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0059.598] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0059.598] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.598] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.598] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.598] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.599] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.599] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0059.599] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0059.599] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.599] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.599] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.600] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.600] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.603] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.603] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\ENYBENY.TXT" (normalized: "c:\\boot\\zh-tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.603] GetFileType (hFile=0x228) returned 0x1 [0059.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.603] GetFileType (hFile=0x228) returned 0x1 [0059.604] WriteFile (in: hFile=0x228, lpBuffer=0x25f0ba8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x25f0ba8*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0059.605] CloseHandle (hObject=0x228) returned 1 [0059.605] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0059.605] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\ENYBENY.png" (normalized: "c:\\boot\\zh-tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.606] GetFileType (hFile=0x228) returned 0x1 [0059.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0059.606] GetFileType (hFile=0x228) returned 0x1 [0059.606] WriteFile (in: hFile=0x228, lpBuffer=0x25f1c10*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x25f1c10*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0059.607] CloseHandle (hObject=0x228) returned 1 [0059.608] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0059.608] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\zh-tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.614] GetFileType (hFile=0x228) returned 0x1 [0059.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0059.614] GetFileType (hFile=0x228) returned 0x1 [0059.615] WriteFile (in: hFile=0x228, lpBuffer=0x25f8768*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x25f8768*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0059.616] CloseHandle (hObject=0x228) returned 1 [0059.616] GetFullPathNameW (in: lpFileName="C:\\Boot\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ENYBENY.TXT", lpFilePart=0x0) returned 0x13 [0059.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0059.616] CreateFileW (lpFileName="C:\\Boot\\ENYBENY.TXT" (normalized: "c:\\boot\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.617] GetFileType (hFile=0x228) returned 0x1 [0059.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0059.617] GetFileType (hFile=0x228) returned 0x1 [0059.618] WriteFile (in: hFile=0x228, lpBuffer=0x2602ac0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x2602ac0*, lpNumberOfBytesWritten=0x1add98*=0x394, lpOverlapped=0x0) returned 1 [0059.619] CloseHandle (hObject=0x228) returned 1 [0059.619] GetFullPathNameW (in: lpFileName="C:\\Boot\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ENYBENY.png", lpFilePart=0x0) returned 0x13 [0059.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0059.619] CreateFileW (lpFileName="C:\\Boot\\ENYBENY.png" (normalized: "c:\\boot\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.619] GetFileType (hFile=0x228) returned 0x1 [0059.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add20) returned 1 [0059.619] GetFileType (hFile=0x228) returned 0x1 [0059.619] WriteFile (in: hFile=0x228, lpBuffer=0x2603b18*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1aded8, lpOverlapped=0x0 | out: lpBuffer=0x2603b18*, lpNumberOfBytesWritten=0x1aded8*=0x50df, lpOverlapped=0x0) returned 1 [0059.621] CloseHandle (hObject=0x228) returned 1 [0059.621] GetFullPathNameW (in: lpFileName="C:\\Boot\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x3e [0059.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0059.621] CreateFileW (lpFileName="C:\\Boot\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\boot\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.622] GetFileType (hFile=0x228) returned 0x1 [0059.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0059.622] GetFileType (hFile=0x228) returned 0x1 [0059.623] WriteFile (in: hFile=0x228, lpBuffer=0x260a640*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x260a640*, lpNumberOfBytesWritten=0x1add98*=0xc6, lpOverlapped=0x0) returned 1 [0059.624] CloseHandle (hObject=0x228) returned 1 [0059.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0059.624] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0059.624] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0059.625] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0780 [0059.625] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.625] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0059.625] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0059.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0059.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0059.626] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0059.626] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0059.626] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0780 [0059.626] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.626] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0059.626] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0059.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0059.627] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x19 [0059.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0059.627] CreateFileW (lpFileName="C:\\Config.Msi\\ENYBENY.TXT" (normalized: "c:\\config.msi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.627] GetFileType (hFile=0x228) returned 0x1 [0059.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0059.627] GetFileType (hFile=0x228) returned 0x1 [0059.628] WriteFile (in: hFile=0x228, lpBuffer=0x2615f18*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x2615f18*, lpNumberOfBytesWritten=0x1add98*=0x394, lpOverlapped=0x0) returned 1 [0059.629] CloseHandle (hObject=0x228) returned 1 [0059.629] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\ENYBENY.png", lpFilePart=0x0) returned 0x19 [0059.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0059.629] CreateFileW (lpFileName="C:\\Config.Msi\\ENYBENY.png" (normalized: "c:\\config.msi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.631] GetFileType (hFile=0x228) returned 0x1 [0059.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add20) returned 1 [0059.631] GetFileType (hFile=0x228) returned 0x1 [0059.631] WriteFile (in: hFile=0x228, lpBuffer=0x2616f80*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1aded8, lpOverlapped=0x0 | out: lpBuffer=0x2616f80*, lpNumberOfBytesWritten=0x1aded8*=0x50df, lpOverlapped=0x0) returned 1 [0059.633] CloseHandle (hObject=0x228) returned 1 [0059.633] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x44 [0059.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0059.633] CreateFileW (lpFileName="C:\\Config.Msi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\config.msi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.633] GetFileType (hFile=0x228) returned 0x1 [0059.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0059.633] GetFileType (hFile=0x228) returned 0x1 [0059.634] WriteFile (in: hFile=0x228, lpBuffer=0x261dad8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x261dad8*, lpNumberOfBytesWritten=0x1add98*=0xc6, lpOverlapped=0x0) returned 1 [0059.634] CloseHandle (hObject=0x228) returned 1 [0059.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0059.635] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0059.635] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\", lpFilePart=0x0) returned 0x1a [0059.635] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0xffffffffffffffff [0059.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adde0) returned 1 [0059.780] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\ENYBENY.TXT", lpFilePart=0x0) returned 0x25 [0059.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0059.780] CreateFileW (lpFileName="C:\\Documents and Settings\\ENYBENY.TXT" (normalized: "c:\\documents and settings\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.781] GetFileType (hFile=0x228) returned 0x1 [0059.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0059.781] GetFileType (hFile=0x228) returned 0x1 [0059.782] WriteFile (in: hFile=0x228, lpBuffer=0x262ca20*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x262ca20*, lpNumberOfBytesWritten=0x1add98*=0x394, lpOverlapped=0x0) returned 1 [0059.783] CloseHandle (hObject=0x228) returned 1 [0059.783] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\ENYBENY.png", lpFilePart=0x0) returned 0x25 [0059.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0059.784] CreateFileW (lpFileName="C:\\Documents and Settings\\ENYBENY.png" (normalized: "c:\\documents and settings\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0059.784] GetFileType (hFile=0x228) returned 0x1 [0059.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add20) returned 1 [0059.784] GetFileType (hFile=0x228) returned 0x1 [0059.784] WriteFile (in: hFile=0x228, lpBuffer=0x262daa0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1aded8, lpOverlapped=0x0 | out: lpBuffer=0x262daa0*, lpNumberOfBytesWritten=0x1aded8*=0x50df, lpOverlapped=0x0) returned 1 [0059.786] CloseHandle (hObject=0x228) returned 1 [0059.786] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x50 [0059.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0059.787] CreateFileW (lpFileName="C:\\Documents and Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\documents and settings\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0059.788] GetFileType (hFile=0x228) returned 0x1 [0059.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0059.788] GetFileType (hFile=0x228) returned 0x1 [0059.788] WriteFile (in: hFile=0x228, lpBuffer=0x2634640*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x2634640*, lpNumberOfBytesWritten=0x1add98*=0xc6, lpOverlapped=0x0) returned 1 [0059.789] CloseHandle (hObject=0x228) returned 1 [0059.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0059.789] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0059.789] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0059.789] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0780 [0059.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0059.790] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0059.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0059.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0059.790] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0059.790] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0059.791] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0780 [0059.791] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.791] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0059.791] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0059.791] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0059.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0059.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.791] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0059.791] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\", lpFilePart=0x0) returned 0x16 [0059.792] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.859] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.860] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.860] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.860] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.861] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.861] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.861] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.863] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.863] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.863] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.863] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.863] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.864] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.864] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.864] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.864] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.864] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.864] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.865] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.865] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0059.866] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0059.866] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\", lpFilePart=0x0) returned 0x16 [0059.866] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0780 [0059.867] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0059.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0059.870] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0059.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0059.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0059.872] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.872] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0059.872] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0059.879] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.880] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.880] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.880] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.880] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.880] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0059.880] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0059.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0059.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0059.880] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.880] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0059.881] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0059.881] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.881] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.881] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.881] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.882] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0059.882] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0059.882] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0059.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0059.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0060.781] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x55 [0060.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0060.781] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0060.783] GetFileType (hFile=0x228) returned 0x1 [0060.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0060.783] GetFileType (hFile=0x228) returned 0x1 [0061.365] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x1addb0 | out: pfEnabled=0x1addb0) returned 0x0 [0062.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0062.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0062.189] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0062.190] GetFileType (hFile=0x23c) returned 0x1 [0062.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0062.190] GetFileType (hFile=0x23c) returned 0x1 [0062.190] ReadFile (in: hFile=0x23c, lpBuffer=0x278c4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x278c4e0*, lpNumberOfBytesRead=0x1add88*=0x61d, lpOverlapped=0x0) returned 1 [0062.210] ReadFile (in: hFile=0x23c, lpBuffer=0x278c2e5, nNumberOfBytesToRead=0x1e3, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x278c2e5*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0062.211] ReadFile (in: hFile=0x23c, lpBuffer=0x278c4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x278c4e0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0062.211] CloseHandle (hObject=0x23c) returned 1 [0062.211] WriteFile (in: hFile=0x228, lpBuffer=0x2786860*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2786860*, lpNumberOfBytesWritten=0x1adc58*=0x640, lpOverlapped=0x0) returned 1 [0062.212] CloseHandle (hObject=0x228) returned 1 [0062.215] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0062.216] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 1 [0062.218] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0062.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0062.218] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0062.218] GetFileType (hFile=0x228) returned 0x1 [0062.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0062.218] GetFileType (hFile=0x228) returned 0x1 [0062.755] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0062.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0062.755] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0062.756] GetFileType (hFile=0x23c) returned 0x1 [0062.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0062.757] GetFileType (hFile=0x23c) returned 0x1 [0062.757] ReadFile (in: hFile=0x23c, lpBuffer=0x26d8040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26d8040*, lpNumberOfBytesRead=0x1add88*=0x8f8, lpOverlapped=0x0) returned 1 [0062.772] ReadFile (in: hFile=0x23c, lpBuffer=0x26d7d20, nNumberOfBytesToRead=0x308, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26d7d20*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0062.772] ReadFile (in: hFile=0x23c, lpBuffer=0x26d8040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26d8040*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0062.772] CloseHandle (hObject=0x23c) returned 1 [0062.773] WriteFile (in: hFile=0x228, lpBuffer=0x26d65d0*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26d65d0*, lpNumberOfBytesWritten=0x1adc58*=0x920, lpOverlapped=0x0) returned 1 [0062.774] CloseHandle (hObject=0x228) returned 1 [0062.786] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0062.786] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0062.792] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0062.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0062.792] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0062.793] GetFileType (hFile=0x228) returned 0x1 [0062.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0062.793] GetFileType (hFile=0x228) returned 0x1 [0062.793] WriteFile (in: hFile=0x228, lpBuffer=0x26e2ed0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26e2ed0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0062.794] CloseHandle (hObject=0x228) returned 1 [0062.795] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0062.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0062.795] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0062.796] GetFileType (hFile=0x228) returned 0x1 [0062.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0062.796] GetFileType (hFile=0x228) returned 0x1 [0062.796] WriteFile (in: hFile=0x228, lpBuffer=0x26e3f98*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26e3f98*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0062.797] CloseHandle (hObject=0x228) returned 1 [0062.798] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0062.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0062.798] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0062.798] GetFileType (hFile=0x228) returned 0x1 [0062.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0062.798] GetFileType (hFile=0x228) returned 0x1 [0062.799] WriteFile (in: hFile=0x228, lpBuffer=0x26eac10*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac10*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0062.800] CloseHandle (hObject=0x228) returned 1 [0062.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0062.800] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0062.801] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0062.801] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0062.821] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.821] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.821] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.821] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.821] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.822] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0062.822] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0062.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0062.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0062.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0062.822] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0062.822] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0062.823] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0062.823] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.823] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.824] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.824] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.824] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0062.824] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0062.824] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0062.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0062.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0062.826] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x5a [0062.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0062.826] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0062.828] GetFileType (hFile=0x228) returned 0x1 [0062.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0062.828] GetFileType (hFile=0x228) returned 0x1 [0063.335] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0063.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0063.335] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0063.336] GetFileType (hFile=0x23c) returned 0x1 [0063.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0063.336] GetFileType (hFile=0x23c) returned 0x1 [0063.336] ReadFile (in: hFile=0x23c, lpBuffer=0x26358b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26358b8*, lpNumberOfBytesRead=0x1add88*=0x5aa, lpOverlapped=0x0) returned 1 [0063.346] ReadFile (in: hFile=0x23c, lpBuffer=0x263564a, nNumberOfBytesToRead=0x256, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x263564a*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0063.347] ReadFile (in: hFile=0x23c, lpBuffer=0x26358b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26358b8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0063.347] CloseHandle (hObject=0x23c) returned 1 [0063.347] WriteFile (in: hFile=0x228, lpBuffer=0x2633e28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2633e28*, lpNumberOfBytesWritten=0x1adc58*=0x5d0, lpOverlapped=0x0) returned 1 [0063.348] CloseHandle (hObject=0x228) returned 1 [0063.352] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0063.352] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 1 [0063.354] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0063.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0063.354] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0063.354] GetFileType (hFile=0x228) returned 0x1 [0063.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0063.354] GetFileType (hFile=0x228) returned 0x1 [0063.821] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0063.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0063.821] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0063.822] GetFileType (hFile=0x23c) returned 0x1 [0063.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0063.822] GetFileType (hFile=0x23c) returned 0x1 [0063.822] ReadFile (in: hFile=0x23c, lpBuffer=0x277d100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277d100*, lpNumberOfBytesRead=0x1add88*=0x75e, lpOverlapped=0x0) returned 1 [0063.960] ReadFile (in: hFile=0x23c, lpBuffer=0x277d046, nNumberOfBytesToRead=0xa2, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277d046*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0063.961] ReadFile (in: hFile=0x23c, lpBuffer=0x277d100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277d100*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0063.961] CloseHandle (hObject=0x23c) returned 1 [0063.961] WriteFile (in: hFile=0x228, lpBuffer=0x277b690*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x277b690*, lpNumberOfBytesWritten=0x1adc58*=0x780, lpOverlapped=0x0) returned 1 [0063.962] CloseHandle (hObject=0x228) returned 1 [0063.963] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0063.963] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0063.967] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0063.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0063.968] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0063.968] GetFileType (hFile=0x228) returned 0x1 [0063.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0063.968] GetFileType (hFile=0x228) returned 0x1 [0063.969] WriteFile (in: hFile=0x228, lpBuffer=0x2787dd8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2787dd8*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0063.970] CloseHandle (hObject=0x228) returned 1 [0063.970] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0063.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0063.970] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0063.971] GetFileType (hFile=0x228) returned 0x1 [0063.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0063.971] GetFileType (hFile=0x228) returned 0x1 [0063.971] WriteFile (in: hFile=0x228, lpBuffer=0x2788ea0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2788ea0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0063.972] CloseHandle (hObject=0x228) returned 1 [0063.973] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0063.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0063.973] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0063.983] GetFileType (hFile=0x228) returned 0x1 [0063.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0063.983] GetFileType (hFile=0x228) returned 0x1 [0063.983] WriteFile (in: hFile=0x228, lpBuffer=0x278fb18*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x278fb18*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0063.985] CloseHandle (hObject=0x228) returned 1 [0063.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0063.985] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0063.985] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0063.985] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0063.999] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0063.999] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0063.999] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0063.999] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0064.000] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0064.000] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0064.000] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0064.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0064.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0064.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0064.001] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0064.001] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0064.001] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0064.002] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0064.002] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0064.002] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0064.003] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0064.003] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0064.003] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0064.003] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0064.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0064.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0064.005] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x59 [0064.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0064.005] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0064.006] GetFileType (hFile=0x228) returned 0x1 [0064.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0064.006] GetFileType (hFile=0x228) returned 0x1 [0064.461] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0064.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0064.461] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0064.462] GetFileType (hFile=0x23c) returned 0x1 [0064.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0064.462] GetFileType (hFile=0x23c) returned 0x1 [0064.462] ReadFile (in: hFile=0x23c, lpBuffer=0x26da730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26da730*, lpNumberOfBytesRead=0x1add88*=0x5aa, lpOverlapped=0x0) returned 1 [0064.483] ReadFile (in: hFile=0x23c, lpBuffer=0x26da4c2, nNumberOfBytesToRead=0x256, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26da4c2*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0064.484] ReadFile (in: hFile=0x23c, lpBuffer=0x26da730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26da730*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0064.484] CloseHandle (hObject=0x23c) returned 1 [0064.484] WriteFile (in: hFile=0x228, lpBuffer=0x26d8ca8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26d8ca8*, lpNumberOfBytesWritten=0x1adc58*=0x5d0, lpOverlapped=0x0) returned 1 [0064.485] CloseHandle (hObject=0x228) returned 1 [0064.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0064.487] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 1 [0064.489] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0064.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0064.489] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0064.490] GetFileType (hFile=0x228) returned 0x1 [0064.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0064.490] GetFileType (hFile=0x228) returned 0x1 [0065.022] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0065.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0065.023] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0065.023] GetFileType (hFile=0x23c) returned 0x1 [0065.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0065.023] GetFileType (hFile=0x23c) returned 0x1 [0065.023] ReadFile (in: hFile=0x23c, lpBuffer=0x2622008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2622008*, lpNumberOfBytesRead=0x1add88*=0x648, lpOverlapped=0x0) returned 1 [0065.059] ReadFile (in: hFile=0x23c, lpBuffer=0x2621e38, nNumberOfBytesToRead=0x1b8, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2621e38*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0065.060] ReadFile (in: hFile=0x23c, lpBuffer=0x2622008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2622008*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0065.060] CloseHandle (hObject=0x23c) returned 1 [0065.060] WriteFile (in: hFile=0x228, lpBuffer=0x2620598*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2620598*, lpNumberOfBytesWritten=0x1adc58*=0x670, lpOverlapped=0x0) returned 1 [0065.062] CloseHandle (hObject=0x228) returned 1 [0065.064] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0065.064] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0065.074] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0065.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0065.074] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0065.075] GetFileType (hFile=0x228) returned 0x1 [0065.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0065.075] GetFileType (hFile=0x228) returned 0x1 [0065.075] WriteFile (in: hFile=0x228, lpBuffer=0x262cbd0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x262cbd0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0065.076] CloseHandle (hObject=0x228) returned 1 [0065.077] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0065.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0065.077] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0065.077] GetFileType (hFile=0x228) returned 0x1 [0065.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0065.077] GetFileType (hFile=0x228) returned 0x1 [0065.077] WriteFile (in: hFile=0x228, lpBuffer=0x262dc98*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x262dc98*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0065.080] CloseHandle (hObject=0x228) returned 1 [0065.080] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0065.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0065.081] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0065.100] GetFileType (hFile=0x228) returned 0x1 [0065.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0065.100] GetFileType (hFile=0x228) returned 0x1 [0065.100] WriteFile (in: hFile=0x228, lpBuffer=0x2634910*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2634910*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0065.101] CloseHandle (hObject=0x228) returned 1 [0065.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0065.101] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0065.101] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0065.101] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0065.167] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0065.168] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0065.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0065.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0065.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0065.169] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0065.169] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0065.169] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0065.170] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0065.172] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0065.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0065.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0065.173] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x57 [0065.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0065.174] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0065.175] GetFileType (hFile=0x228) returned 0x1 [0065.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0065.175] GetFileType (hFile=0x228) returned 0x1 [0065.695] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0065.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0065.695] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0065.696] GetFileType (hFile=0x23c) returned 0x1 [0065.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0065.696] GetFileType (hFile=0x23c) returned 0x1 [0065.696] ReadFile (in: hFile=0x23c, lpBuffer=0x277f4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f4b0*, lpNumberOfBytesRead=0x1add88*=0xc72, lpOverlapped=0x0) returned 1 [0065.713] ReadFile (in: hFile=0x23c, lpBuffer=0x277f10a, nNumberOfBytesToRead=0x38e, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f10a*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0065.713] ReadFile (in: hFile=0x23c, lpBuffer=0x277f4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f4b0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0065.714] CloseHandle (hObject=0x23c) returned 1 [0065.714] WriteFile (in: hFile=0x228, lpBuffer=0x277da30*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x277da30*, lpNumberOfBytesWritten=0x1adc58*=0xca0, lpOverlapped=0x0) returned 1 [0065.715] CloseHandle (hObject=0x228) returned 1 [0065.718] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0065.718] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 1 [0065.720] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0065.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0065.720] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0065.720] GetFileType (hFile=0x228) returned 0x1 [0065.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0065.720] GetFileType (hFile=0x228) returned 0x1 [0066.242] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0066.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0066.242] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0066.244] GetFileType (hFile=0x23c) returned 0x1 [0066.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0066.244] GetFileType (hFile=0x23c) returned 0x1 [0066.244] ReadFile (in: hFile=0x23c, lpBuffer=0x26c7470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26c7470*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0066.264] WriteFile (in: hFile=0x228, lpBuffer=0x26c5a00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26c5a00*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0066.265] ReadFile (in: hFile=0x23c, lpBuffer=0x26c7470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26c7470*, lpNumberOfBytesRead=0x1add88*=0x6f, lpOverlapped=0x0) returned 1 [0066.265] ReadFile (in: hFile=0x23c, lpBuffer=0x26c7470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26c7470*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0066.266] CloseHandle (hObject=0x23c) returned 1 [0066.266] WriteFile (in: hFile=0x228, lpBuffer=0x26c5a00*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26c5a00*, lpNumberOfBytesWritten=0x1adc58*=0x90, lpOverlapped=0x0) returned 1 [0066.266] CloseHandle (hObject=0x228) returned 1 [0066.272] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0066.272] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0066.277] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0066.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0066.277] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0066.277] GetFileType (hFile=0x228) returned 0x1 [0066.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0066.277] GetFileType (hFile=0x228) returned 0x1 [0066.278] WriteFile (in: hFile=0x228, lpBuffer=0x26d2aa0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26d2aa0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0066.279] CloseHandle (hObject=0x228) returned 1 [0066.279] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0066.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0066.279] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0066.281] GetFileType (hFile=0x228) returned 0x1 [0066.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0066.281] GetFileType (hFile=0x228) returned 0x1 [0066.281] WriteFile (in: hFile=0x228, lpBuffer=0x26d3b68*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26d3b68*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0066.283] CloseHandle (hObject=0x228) returned 1 [0066.283] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0066.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0066.284] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0066.284] GetFileType (hFile=0x228) returned 0x1 [0066.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0066.284] GetFileType (hFile=0x228) returned 0x1 [0066.284] WriteFile (in: hFile=0x228, lpBuffer=0x26da7e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26da7e0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0066.285] CloseHandle (hObject=0x228) returned 1 [0066.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0066.286] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0066.286] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0066.286] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0066.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.289] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0066.289] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0066.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0066.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0066.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0066.289] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0066.289] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0066.289] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0066.290] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.290] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.290] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.290] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.291] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0066.291] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0066.291] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0066.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0066.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0066.292] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0066.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0066.292] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0066.306] GetFileType (hFile=0x228) returned 0x1 [0066.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0066.306] GetFileType (hFile=0x228) returned 0x1 [0066.902] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0066.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0066.902] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0066.904] GetFileType (hFile=0x23c) returned 0x1 [0066.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0066.904] GetFileType (hFile=0x23c) returned 0x1 [0066.904] ReadFile (in: hFile=0x23c, lpBuffer=0x26251e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26251e8*, lpNumberOfBytesRead=0x1add88*=0x978, lpOverlapped=0x0) returned 1 [0066.923] ReadFile (in: hFile=0x23c, lpBuffer=0x2624f48, nNumberOfBytesToRead=0x288, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2624f48*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0066.923] ReadFile (in: hFile=0x23c, lpBuffer=0x26251e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26251e8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0066.923] CloseHandle (hObject=0x23c) returned 1 [0066.923] WriteFile (in: hFile=0x228, lpBuffer=0x2623778*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2623778*, lpNumberOfBytesWritten=0x1adc58*=0x9a0, lpOverlapped=0x0) returned 1 [0066.925] CloseHandle (hObject=0x228) returned 1 [0066.927] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0066.927] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0066.929] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x54 [0066.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0066.929] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0066.929] GetFileType (hFile=0x228) returned 0x1 [0066.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0066.929] GetFileType (hFile=0x228) returned 0x1 [0067.488] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0067.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0067.488] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0067.489] GetFileType (hFile=0x23c) returned 0x1 [0067.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0067.489] GetFileType (hFile=0x23c) returned 0x1 [0067.489] ReadFile (in: hFile=0x23c, lpBuffer=0x276ce68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x276ce68*, lpNumberOfBytesRead=0x1add88*=0x708, lpOverlapped=0x0) returned 1 [0067.503] ReadFile (in: hFile=0x23c, lpBuffer=0x276cd58, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x276cd58*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0067.504] ReadFile (in: hFile=0x23c, lpBuffer=0x276ce68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x276ce68*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0067.504] CloseHandle (hObject=0x23c) returned 1 [0067.504] WriteFile (in: hFile=0x228, lpBuffer=0x276b3f8*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x276b3f8*, lpNumberOfBytesWritten=0x1adc58*=0x730, lpOverlapped=0x0) returned 1 [0067.505] CloseHandle (hObject=0x228) returned 1 [0067.507] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0067.507] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 1 [0067.511] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0067.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0067.511] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0067.513] GetFileType (hFile=0x228) returned 0x1 [0067.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0067.513] GetFileType (hFile=0x228) returned 0x1 [0067.514] WriteFile (in: hFile=0x228, lpBuffer=0x2777af0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2777af0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0067.515] CloseHandle (hObject=0x228) returned 1 [0067.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0067.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0067.515] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0067.516] GetFileType (hFile=0x228) returned 0x1 [0067.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0067.516] GetFileType (hFile=0x228) returned 0x1 [0067.516] WriteFile (in: hFile=0x228, lpBuffer=0x2778bb8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2778bb8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0067.518] CloseHandle (hObject=0x228) returned 1 [0067.518] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0067.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0067.519] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0067.529] GetFileType (hFile=0x228) returned 0x1 [0067.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0067.529] GetFileType (hFile=0x228) returned 0x1 [0067.529] WriteFile (in: hFile=0x228, lpBuffer=0x277f830*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x277f830*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0067.530] CloseHandle (hObject=0x228) returned 1 [0067.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0067.531] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0067.531] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0067.531] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0067.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.542] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0067.543] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0067.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0067.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0067.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0067.544] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0067.545] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0067.545] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0067.546] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.546] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.546] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.546] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.546] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.546] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0067.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0067.549] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0067.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0067.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0067.551] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.EnyBenied", lpFilePart=0x0) returned 0x55 [0067.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0067.551] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0067.552] GetFileType (hFile=0x228) returned 0x1 [0067.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0067.552] GetFileType (hFile=0x228) returned 0x1 [0068.079] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0068.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0068.080] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0068.080] GetFileType (hFile=0x23c) returned 0x1 [0068.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0068.080] GetFileType (hFile=0x23c) returned 0x1 [0068.080] ReadFile (in: hFile=0x23c, lpBuffer=0x26cab80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26cab80*, lpNumberOfBytesRead=0x1add88*=0x32b, lpOverlapped=0x0) returned 1 [0068.105] ReadFile (in: hFile=0x23c, lpBuffer=0x26cab80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26cab80*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0068.105] CloseHandle (hObject=0x23c) returned 1 [0068.105] WriteFile (in: hFile=0x228, lpBuffer=0x26c9108*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26c9108*, lpNumberOfBytesWritten=0x1adc58*=0x350, lpOverlapped=0x0) returned 1 [0068.107] CloseHandle (hObject=0x228) returned 1 [0068.108] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0068.108] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 1 [0068.110] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0068.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0068.110] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0068.110] GetFileType (hFile=0x228) returned 0x1 [0068.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0068.110] GetFileType (hFile=0x228) returned 0x1 [0068.650] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0068.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0068.650] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0068.651] GetFileType (hFile=0x23c) returned 0x1 [0068.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0068.651] GetFileType (hFile=0x23c) returned 0x1 [0068.651] ReadFile (in: hFile=0x23c, lpBuffer=0x2612198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2612198*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0068.674] WriteFile (in: hFile=0x228, lpBuffer=0x2610728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2610728*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0068.675] ReadFile (in: hFile=0x23c, lpBuffer=0x2612198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2612198*, lpNumberOfBytesRead=0x1add88*=0x6fc, lpOverlapped=0x0) returned 1 [0068.675] ReadFile (in: hFile=0x23c, lpBuffer=0x261207c, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x261207c*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0068.675] ReadFile (in: hFile=0x23c, lpBuffer=0x2612198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2612198*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0068.675] CloseHandle (hObject=0x23c) returned 1 [0068.675] WriteFile (in: hFile=0x228, lpBuffer=0x2610728*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2610728*, lpNumberOfBytesWritten=0x1adc58*=0x720, lpOverlapped=0x0) returned 1 [0068.676] CloseHandle (hObject=0x228) returned 1 [0068.679] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0068.679] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0068.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0068.680] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0068.680] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", lpFilePart=0x0) returned 0x48 [0068.681] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0068.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0068.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0068.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0068.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0068.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0068.682] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0068.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0068.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0068.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0068.682] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0068.682] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", lpFilePart=0x0) returned 0x48 [0068.682] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0068.682] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0068.682] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0068.682] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0068.683] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0068.683] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0068.683] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0068.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0068.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0068.684] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.EnyBenied", lpFilePart=0x0) returned 0x5b [0068.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0068.684] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0068.685] GetFileType (hFile=0x228) returned 0x1 [0068.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0068.685] GetFileType (hFile=0x228) returned 0x1 [0069.274] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0069.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0069.274] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0069.275] GetFileType (hFile=0x23c) returned 0x1 [0069.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0069.276] GetFileType (hFile=0x23c) returned 0x1 [0069.276] ReadFile (in: hFile=0x23c, lpBuffer=0x275e2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x275e2b0*, lpNumberOfBytesRead=0x1add08*=0x543, lpOverlapped=0x0) returned 1 [0069.288] ReadFile (in: hFile=0x23c, lpBuffer=0x275dfdb, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x275dfdb*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0069.289] ReadFile (in: hFile=0x23c, lpBuffer=0x275e2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x275e2b0*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0069.289] CloseHandle (hObject=0x23c) returned 1 [0069.289] WriteFile (in: hFile=0x228, lpBuffer=0x275c830*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x275c830*, lpNumberOfBytesWritten=0x1adbd8*=0x570, lpOverlapped=0x0) returned 1 [0069.290] CloseHandle (hObject=0x228) returned 1 [0069.292] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0069.292] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 1 [0069.296] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\ENYBENY.TXT", lpFilePart=0x0) returned 0x53 [0069.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0069.296] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0069.296] GetFileType (hFile=0x228) returned 0x1 [0069.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0069.297] GetFileType (hFile=0x228) returned 0x1 [0069.297] WriteFile (in: hFile=0x228, lpBuffer=0x2768db0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2768db0*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0069.298] CloseHandle (hObject=0x228) returned 1 [0069.299] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\ENYBENY.png", lpFilePart=0x0) returned 0x53 [0069.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0069.299] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0069.299] GetFileType (hFile=0x228) returned 0x1 [0069.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0069.299] GetFileType (hFile=0x228) returned 0x1 [0069.299] WriteFile (in: hFile=0x228, lpBuffer=0x2769e88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x2769e88*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0069.301] CloseHandle (hObject=0x228) returned 1 [0069.301] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7e [0069.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0069.301] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0069.324] GetFileType (hFile=0x228) returned 0x1 [0069.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0069.324] GetFileType (hFile=0x228) returned 0x1 [0069.324] WriteFile (in: hFile=0x228, lpBuffer=0x2770b30*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2770b30*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0069.325] CloseHandle (hObject=0x228) returned 1 [0069.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0069.325] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0069.325] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", lpFilePart=0x0) returned 0x48 [0069.326] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0069.326] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0069.327] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0069.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0069.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0069.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0069.327] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0069.327] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", lpFilePart=0x0) returned 0x48 [0069.327] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0069.327] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.328] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.328] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.328] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0069.328] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0069.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0069.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0069.329] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.EnyBenied", lpFilePart=0x0) returned 0x5b [0069.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0069.329] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0069.330] GetFileType (hFile=0x228) returned 0x1 [0069.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0069.330] GetFileType (hFile=0x228) returned 0x1 [0069.886] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0069.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0069.886] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0069.887] GetFileType (hFile=0x23c) returned 0x1 [0069.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0069.887] GetFileType (hFile=0x23c) returned 0x1 [0069.887] ReadFile (in: hFile=0x23c, lpBuffer=0x26a0800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26a0800*, lpNumberOfBytesRead=0x1add08*=0x5b1, lpOverlapped=0x0) returned 1 [0069.896] ReadFile (in: hFile=0x23c, lpBuffer=0x26a0599, nNumberOfBytesToRead=0x24f, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26a0599*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0069.896] ReadFile (in: hFile=0x23c, lpBuffer=0x26a0800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26a0800*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0069.896] CloseHandle (hObject=0x23c) returned 1 [0069.897] WriteFile (in: hFile=0x228, lpBuffer=0x269ed80*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x269ed80*, lpNumberOfBytesWritten=0x1adbd8*=0x5e0, lpOverlapped=0x0) returned 1 [0069.898] CloseHandle (hObject=0x228) returned 1 [0069.899] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0069.899] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 1 [0069.903] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x53 [0069.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0069.903] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0069.904] GetFileType (hFile=0x228) returned 0x1 [0069.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0069.904] GetFileType (hFile=0x228) returned 0x1 [0069.904] WriteFile (in: hFile=0x228, lpBuffer=0x26ab370*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26ab370*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0069.905] CloseHandle (hObject=0x228) returned 1 [0069.906] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\ENYBENY.png", lpFilePart=0x0) returned 0x53 [0069.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0069.906] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0069.906] GetFileType (hFile=0x228) returned 0x1 [0069.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0069.906] GetFileType (hFile=0x228) returned 0x1 [0069.906] WriteFile (in: hFile=0x228, lpBuffer=0x26ac448*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26ac448*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0069.908] CloseHandle (hObject=0x228) returned 1 [0069.908] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7e [0069.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0069.908] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0069.910] GetFileType (hFile=0x228) returned 0x1 [0069.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0069.910] GetFileType (hFile=0x228) returned 0x1 [0069.910] WriteFile (in: hFile=0x228, lpBuffer=0x26b30f0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26b30f0*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0069.911] CloseHandle (hObject=0x228) returned 1 [0069.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0069.912] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0069.912] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", lpFilePart=0x0) returned 0x48 [0069.912] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0069.912] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.912] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.912] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.912] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.913] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0069.913] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0069.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0069.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0069.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0069.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0069.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", lpFilePart=0x0) returned 0x48 [0069.913] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0069.913] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.913] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.914] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.914] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0069.914] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0069.914] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0069.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0069.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0069.915] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.EnyBenied", lpFilePart=0x0) returned 0x5b [0069.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0069.915] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0069.915] GetFileType (hFile=0x228) returned 0x1 [0069.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0069.916] GetFileType (hFile=0x228) returned 0x1 [0070.373] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0070.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0070.373] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0070.374] GetFileType (hFile=0x23c) returned 0x1 [0070.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0070.374] GetFileType (hFile=0x23c) returned 0x1 [0070.374] ReadFile (in: hFile=0x23c, lpBuffer=0x25fda10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x25fda10*, lpNumberOfBytesRead=0x1add08*=0x5b2, lpOverlapped=0x0) returned 1 [0070.389] ReadFile (in: hFile=0x23c, lpBuffer=0x25fd7aa, nNumberOfBytesToRead=0x24e, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x25fd7aa*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0070.390] ReadFile (in: hFile=0x23c, lpBuffer=0x25fda10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x25fda10*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0070.390] CloseHandle (hObject=0x23c) returned 1 [0070.390] WriteFile (in: hFile=0x228, lpBuffer=0x25fbf90*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x25fbf90*, lpNumberOfBytesWritten=0x1adbd8*=0x5e0, lpOverlapped=0x0) returned 1 [0070.391] CloseHandle (hObject=0x228) returned 1 [0070.392] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0070.392] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 1 [0070.396] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x53 [0070.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0070.396] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0070.397] GetFileType (hFile=0x228) returned 0x1 [0070.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0070.397] GetFileType (hFile=0x228) returned 0x1 [0070.397] WriteFile (in: hFile=0x228, lpBuffer=0x2608580*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2608580*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0070.398] CloseHandle (hObject=0x228) returned 1 [0070.398] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\ENYBENY.png", lpFilePart=0x0) returned 0x53 [0070.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0070.399] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0070.400] GetFileType (hFile=0x228) returned 0x1 [0070.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0070.400] GetFileType (hFile=0x228) returned 0x1 [0070.400] WriteFile (in: hFile=0x228, lpBuffer=0x2609658*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x2609658*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0070.401] CloseHandle (hObject=0x228) returned 1 [0070.401] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7e [0070.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0070.402] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0070.413] GetFileType (hFile=0x228) returned 0x1 [0070.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0070.413] GetFileType (hFile=0x228) returned 0x1 [0070.413] WriteFile (in: hFile=0x228, lpBuffer=0x2610300*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2610300*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0070.414] CloseHandle (hObject=0x228) returned 1 [0070.417] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0070.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0070.417] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0070.417] GetFileType (hFile=0x228) returned 0x1 [0070.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0070.417] GetFileType (hFile=0x228) returned 0x1 [0070.418] WriteFile (in: hFile=0x228, lpBuffer=0x261a738*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x261a738*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0070.419] CloseHandle (hObject=0x228) returned 1 [0070.420] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0070.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0070.420] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0070.421] GetFileType (hFile=0x228) returned 0x1 [0070.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0070.421] GetFileType (hFile=0x228) returned 0x1 [0070.421] WriteFile (in: hFile=0x228, lpBuffer=0x261b800*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x261b800*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0070.422] CloseHandle (hObject=0x228) returned 1 [0070.423] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0070.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0070.423] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0070.423] GetFileType (hFile=0x228) returned 0x1 [0070.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0070.423] GetFileType (hFile=0x228) returned 0x1 [0070.423] WriteFile (in: hFile=0x228, lpBuffer=0x2622478*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2622478*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0070.424] CloseHandle (hObject=0x228) returned 1 [0070.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0070.425] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0070.425] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0070.425] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0070.434] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.434] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.434] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.434] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.434] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.435] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0070.435] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0070.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0070.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0070.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0070.436] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0070.436] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0070.436] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0070.437] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.437] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.437] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.437] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.437] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0070.437] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0070.437] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0070.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0070.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0070.439] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.EnyBenied", lpFilePart=0x0) returned 0x58 [0070.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0070.439] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0070.440] GetFileType (hFile=0x228) returned 0x1 [0070.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0070.441] GetFileType (hFile=0x228) returned 0x1 [0070.898] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0070.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0070.899] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0070.899] GetFileType (hFile=0x23c) returned 0x1 [0070.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0070.899] GetFileType (hFile=0x23c) returned 0x1 [0070.899] ReadFile (in: hFile=0x23c, lpBuffer=0x276cfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x276cfc0*, lpNumberOfBytesRead=0x1add88*=0x567, lpOverlapped=0x0) returned 1 [0070.988] ReadFile (in: hFile=0x23c, lpBuffer=0x276cd0f, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x276cd0f*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0070.989] ReadFile (in: hFile=0x23c, lpBuffer=0x276cfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x276cfc0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0070.989] CloseHandle (hObject=0x23c) returned 1 [0070.989] WriteFile (in: hFile=0x228, lpBuffer=0x276b540*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x276b540*, lpNumberOfBytesWritten=0x1adc58*=0x590, lpOverlapped=0x0) returned 1 [0070.990] CloseHandle (hObject=0x228) returned 1 [0070.990] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0070.990] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 1 [0070.992] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0070.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0070.992] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0070.992] GetFileType (hFile=0x228) returned 0x1 [0070.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0070.992] GetFileType (hFile=0x228) returned 0x1 [0071.421] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0071.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0071.422] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0071.422] GetFileType (hFile=0x23c) returned 0x1 [0071.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0071.422] GetFileType (hFile=0x23c) returned 0x1 [0071.422] ReadFile (in: hFile=0x23c, lpBuffer=0x26b4850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26b4850*, lpNumberOfBytesRead=0x1add88*=0x93a, lpOverlapped=0x0) returned 1 [0071.474] ReadFile (in: hFile=0x23c, lpBuffer=0x26b4572, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26b4572*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0071.475] ReadFile (in: hFile=0x23c, lpBuffer=0x26b4850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26b4850*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0071.475] CloseHandle (hObject=0x23c) returned 1 [0071.475] WriteFile (in: hFile=0x228, lpBuffer=0x26b2de0*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26b2de0*, lpNumberOfBytesWritten=0x1adc58*=0x960, lpOverlapped=0x0) returned 1 [0071.476] CloseHandle (hObject=0x228) returned 1 [0071.477] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0071.477] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0071.483] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0071.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0071.483] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0071.484] GetFileType (hFile=0x228) returned 0x1 [0071.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0071.484] GetFileType (hFile=0x228) returned 0x1 [0071.484] WriteFile (in: hFile=0x228, lpBuffer=0x26bf720*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26bf720*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0071.486] CloseHandle (hObject=0x228) returned 1 [0071.486] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0071.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0071.486] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0071.488] GetFileType (hFile=0x228) returned 0x1 [0071.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0071.488] GetFileType (hFile=0x228) returned 0x1 [0071.488] WriteFile (in: hFile=0x228, lpBuffer=0x26c07e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26c07e8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0071.489] CloseHandle (hObject=0x228) returned 1 [0071.490] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0071.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0071.490] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0071.492] GetFileType (hFile=0x228) returned 0x1 [0071.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0071.492] GetFileType (hFile=0x228) returned 0x1 [0071.492] WriteFile (in: hFile=0x228, lpBuffer=0x26c7460*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26c7460*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0071.493] CloseHandle (hObject=0x228) returned 1 [0071.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0071.493] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0071.494] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0071.494] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0071.501] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.501] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.501] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.502] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.502] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.502] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0071.502] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0071.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0071.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0071.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0071.503] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0071.503] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0071.503] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0071.504] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.504] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.504] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.505] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.505] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0071.505] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0071.505] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0071.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0071.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0071.507] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x58 [0071.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0071.507] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0071.508] GetFileType (hFile=0x228) returned 0x1 [0071.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0071.508] GetFileType (hFile=0x228) returned 0x1 [0072.040] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0072.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0072.040] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0072.041] GetFileType (hFile=0x23c) returned 0x1 [0072.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0072.041] GetFileType (hFile=0x23c) returned 0x1 [0072.041] ReadFile (in: hFile=0x23c, lpBuffer=0x26120a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26120a8*, lpNumberOfBytesRead=0x1add88*=0x4cf, lpOverlapped=0x0) returned 1 [0072.049] ReadFile (in: hFile=0x23c, lpBuffer=0x2611d5f, nNumberOfBytesToRead=0x331, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2611d5f*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0072.050] ReadFile (in: hFile=0x23c, lpBuffer=0x26120a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26120a8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0072.050] CloseHandle (hObject=0x23c) returned 1 [0072.050] WriteFile (in: hFile=0x228, lpBuffer=0x2610628*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2610628*, lpNumberOfBytesWritten=0x1adc58*=0x4f0, lpOverlapped=0x0) returned 1 [0072.051] CloseHandle (hObject=0x228) returned 1 [0072.052] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0072.052] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 1 [0072.054] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0072.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0072.054] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0072.055] GetFileType (hFile=0x228) returned 0x1 [0072.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0072.055] GetFileType (hFile=0x228) returned 0x1 [0072.551] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0072.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0072.551] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0072.552] GetFileType (hFile=0x23c) returned 0x1 [0072.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0072.552] GetFileType (hFile=0x23c) returned 0x1 [0072.552] ReadFile (in: hFile=0x23c, lpBuffer=0x27597c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27597c0*, lpNumberOfBytesRead=0x1add88*=0x73c, lpOverlapped=0x0) returned 1 [0072.570] ReadFile (in: hFile=0x23c, lpBuffer=0x27596e4, nNumberOfBytesToRead=0xc4, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27596e4*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0072.571] ReadFile (in: hFile=0x23c, lpBuffer=0x27597c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27597c0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0072.572] CloseHandle (hObject=0x23c) returned 1 [0072.572] WriteFile (in: hFile=0x228, lpBuffer=0x2757d50*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2757d50*, lpNumberOfBytesWritten=0x1adc58*=0x760, lpOverlapped=0x0) returned 1 [0072.573] CloseHandle (hObject=0x228) returned 1 [0072.575] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0072.575] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0072.581] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0072.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0072.581] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0072.582] GetFileType (hFile=0x228) returned 0x1 [0072.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0072.582] GetFileType (hFile=0x228) returned 0x1 [0072.583] WriteFile (in: hFile=0x228, lpBuffer=0x2764478*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2764478*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0072.584] CloseHandle (hObject=0x228) returned 1 [0072.584] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0072.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0072.584] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0072.585] GetFileType (hFile=0x228) returned 0x1 [0072.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0072.585] GetFileType (hFile=0x228) returned 0x1 [0072.585] WriteFile (in: hFile=0x228, lpBuffer=0x2765540*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2765540*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0072.586] CloseHandle (hObject=0x228) returned 1 [0072.587] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0072.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0072.587] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0072.587] GetFileType (hFile=0x228) returned 0x1 [0072.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0072.588] GetFileType (hFile=0x228) returned 0x1 [0072.588] WriteFile (in: hFile=0x228, lpBuffer=0x276c1b8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x276c1b8*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0072.589] CloseHandle (hObject=0x228) returned 1 [0072.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0072.589] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0072.589] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0072.589] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0072.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.591] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.591] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0072.591] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0072.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0072.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0072.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0072.591] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0072.591] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0072.591] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0072.592] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.592] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.592] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.592] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.592] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0072.593] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0072.593] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0072.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0072.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0072.594] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0072.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0072.594] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0072.597] GetFileType (hFile=0x228) returned 0x1 [0072.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0072.597] GetFileType (hFile=0x228) returned 0x1 [0073.095] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0073.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0073.095] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0073.096] GetFileType (hFile=0x23c) returned 0x1 [0073.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0073.096] GetFileType (hFile=0x23c) returned 0x1 [0073.096] ReadFile (in: hFile=0x23c, lpBuffer=0x26b6c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26b6c28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0073.111] WriteFile (in: hFile=0x228, lpBuffer=0x26b51b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26b51b8*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0073.112] ReadFile (in: hFile=0x23c, lpBuffer=0x26b6c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26b6c28*, lpNumberOfBytesRead=0x1add88*=0x861, lpOverlapped=0x0) returned 1 [0073.157] ReadFile (in: hFile=0x23c, lpBuffer=0x26b6871, nNumberOfBytesToRead=0x39f, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26b6871*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0073.157] ReadFile (in: hFile=0x23c, lpBuffer=0x26b6c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26b6c28*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0073.157] CloseHandle (hObject=0x23c) returned 1 [0073.159] WriteFile (in: hFile=0x228, lpBuffer=0x26b51b8*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26b51b8*, lpNumberOfBytesWritten=0x1adc58*=0x890, lpOverlapped=0x0) returned 1 [0073.160] CloseHandle (hObject=0x228) returned 1 [0073.163] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0073.163] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0073.167] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x55 [0073.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0073.168] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0073.168] GetFileType (hFile=0x228) returned 0x1 [0073.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0073.168] GetFileType (hFile=0x228) returned 0x1 [0073.694] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0073.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0073.694] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0073.694] GetFileType (hFile=0x23c) returned 0x1 [0073.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0073.695] GetFileType (hFile=0x23c) returned 0x1 [0073.695] ReadFile (in: hFile=0x23c, lpBuffer=0x25ff888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25ff888*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0073.696] WriteFile (in: hFile=0x228, lpBuffer=0x25fde10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x25fde10*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0073.697] ReadFile (in: hFile=0x23c, lpBuffer=0x25ff888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25ff888*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0073.702] WriteFile (in: hFile=0x228, lpBuffer=0x25fde10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x25fde10*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0073.702] ReadFile (in: hFile=0x23c, lpBuffer=0x25ff888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25ff888*, lpNumberOfBytesRead=0x1add88*=0x51f, lpOverlapped=0x0) returned 1 [0073.702] ReadFile (in: hFile=0x23c, lpBuffer=0x25ff58f, nNumberOfBytesToRead=0x2e1, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25ff58f*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0073.702] ReadFile (in: hFile=0x23c, lpBuffer=0x25ff888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25ff888*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0073.702] CloseHandle (hObject=0x23c) returned 1 [0073.702] WriteFile (in: hFile=0x228, lpBuffer=0x25fde10*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x25fde10*, lpNumberOfBytesWritten=0x1adc58*=0x540, lpOverlapped=0x0) returned 1 [0073.703] CloseHandle (hObject=0x228) returned 1 [0073.707] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0073.707] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 1 [0073.715] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0073.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0073.715] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0073.715] GetFileType (hFile=0x228) returned 0x1 [0073.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0073.715] GetFileType (hFile=0x228) returned 0x1 [0073.715] WriteFile (in: hFile=0x228, lpBuffer=0x260c3e0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x260c3e0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0073.716] CloseHandle (hObject=0x228) returned 1 [0073.717] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0073.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0073.717] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0073.717] GetFileType (hFile=0x228) returned 0x1 [0073.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0073.717] GetFileType (hFile=0x228) returned 0x1 [0073.717] WriteFile (in: hFile=0x228, lpBuffer=0x260d4a8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x260d4a8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0073.719] CloseHandle (hObject=0x228) returned 1 [0073.719] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0073.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0073.719] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0073.720] GetFileType (hFile=0x228) returned 0x1 [0073.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0073.720] GetFileType (hFile=0x228) returned 0x1 [0073.720] WriteFile (in: hFile=0x228, lpBuffer=0x2614120*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2614120*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0073.721] CloseHandle (hObject=0x228) returned 1 [0073.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0073.721] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0073.721] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0073.721] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0073.762] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.762] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.763] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.763] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.763] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.763] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0073.763] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0073.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0073.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0073.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0073.764] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0073.764] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0073.764] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0073.765] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.765] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.766] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.766] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.766] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0073.766] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0073.766] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0073.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0073.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0073.768] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x57 [0073.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0073.768] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0073.770] GetFileType (hFile=0x228) returned 0x1 [0073.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0073.770] GetFileType (hFile=0x228) returned 0x1 [0074.257] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0074.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0074.257] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0074.258] GetFileType (hFile=0x158) returned 0x1 [0074.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0074.258] GetFileType (hFile=0x158) returned 0x1 [0074.258] ReadFile (in: hFile=0x158, lpBuffer=0x275ec68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x275ec68*, lpNumberOfBytesRead=0x1add88*=0x646, lpOverlapped=0x0) returned 1 [0074.278] ReadFile (in: hFile=0x158, lpBuffer=0x275ea96, nNumberOfBytesToRead=0x1ba, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x275ea96*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0074.279] ReadFile (in: hFile=0x158, lpBuffer=0x275ec68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x275ec68*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0074.279] CloseHandle (hObject=0x158) returned 1 [0074.279] WriteFile (in: hFile=0x228, lpBuffer=0x275d1e8*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x275d1e8*, lpNumberOfBytesWritten=0x1adc58*=0x670, lpOverlapped=0x0) returned 1 [0074.280] CloseHandle (hObject=0x228) returned 1 [0074.283] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0074.283] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 1 [0074.285] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0074.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0074.285] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0074.286] GetFileType (hFile=0x228) returned 0x1 [0074.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0074.286] GetFileType (hFile=0x228) returned 0x1 [0074.782] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0074.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0074.782] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0074.783] GetFileType (hFile=0x158) returned 0x1 [0074.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0074.783] GetFileType (hFile=0x158) returned 0x1 [0074.784] ReadFile (in: hFile=0x158, lpBuffer=0x26a65e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26a65e8*, lpNumberOfBytesRead=0x1add88*=0x7c4, lpOverlapped=0x0) returned 1 [0074.804] ReadFile (in: hFile=0x158, lpBuffer=0x26a6594, nNumberOfBytesToRead=0x3c, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26a6594*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0074.805] ReadFile (in: hFile=0x158, lpBuffer=0x26a65e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26a65e8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0074.805] CloseHandle (hObject=0x158) returned 1 [0074.805] WriteFile (in: hFile=0x228, lpBuffer=0x26a4b78*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26a4b78*, lpNumberOfBytesWritten=0x1adc58*=0x7f0, lpOverlapped=0x0) returned 1 [0074.806] CloseHandle (hObject=0x228) returned 1 [0074.814] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0074.814] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0074.818] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0074.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0074.818] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0074.819] GetFileType (hFile=0x228) returned 0x1 [0074.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0074.819] GetFileType (hFile=0x228) returned 0x1 [0074.819] WriteFile (in: hFile=0x228, lpBuffer=0x26b1338*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26b1338*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0074.820] CloseHandle (hObject=0x228) returned 1 [0074.821] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0074.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0074.821] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0074.821] GetFileType (hFile=0x228) returned 0x1 [0074.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0074.821] GetFileType (hFile=0x228) returned 0x1 [0074.821] WriteFile (in: hFile=0x228, lpBuffer=0x26b2400*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26b2400*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0074.823] CloseHandle (hObject=0x228) returned 1 [0074.823] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0074.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0074.823] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0074.823] GetFileType (hFile=0x228) returned 0x1 [0074.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0074.823] GetFileType (hFile=0x228) returned 0x1 [0074.823] WriteFile (in: hFile=0x228, lpBuffer=0x26b9078*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26b9078*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0074.824] CloseHandle (hObject=0x228) returned 1 [0074.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0074.825] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0074.825] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0074.825] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0074.836] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.837] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.837] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.837] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.837] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.837] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0074.837] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0074.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0074.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0074.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0074.838] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0074.838] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0074.838] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0074.839] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.839] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.839] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.839] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.839] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0074.840] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0074.840] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0074.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0074.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0074.841] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x57 [0074.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0074.841] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0074.865] GetFileType (hFile=0x228) returned 0x1 [0074.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0074.865] GetFileType (hFile=0x228) returned 0x1 [0075.435] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0075.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0075.435] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0075.436] GetFileType (hFile=0x158) returned 0x1 [0075.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0075.436] GetFileType (hFile=0x158) returned 0x1 [0075.436] ReadFile (in: hFile=0x158, lpBuffer=0x2603c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2603c58*, lpNumberOfBytesRead=0x1add88*=0x5ac, lpOverlapped=0x0) returned 1 [0075.446] ReadFile (in: hFile=0x158, lpBuffer=0x26039ec, nNumberOfBytesToRead=0x254, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26039ec*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0075.446] ReadFile (in: hFile=0x158, lpBuffer=0x2603c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2603c58*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0075.446] CloseHandle (hObject=0x158) returned 1 [0075.447] WriteFile (in: hFile=0x228, lpBuffer=0x26021d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26021d8*, lpNumberOfBytesWritten=0x1adc58*=0x5d0, lpOverlapped=0x0) returned 1 [0075.448] CloseHandle (hObject=0x228) returned 1 [0075.451] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0075.451] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 1 [0075.453] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0075.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0075.453] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0075.453] GetFileType (hFile=0x228) returned 0x1 [0075.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0075.453] GetFileType (hFile=0x228) returned 0x1 [0075.858] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0075.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0075.858] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0075.860] GetFileType (hFile=0x158) returned 0x1 [0075.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0075.860] GetFileType (hFile=0x158) returned 0x1 [0075.860] ReadFile (in: hFile=0x158, lpBuffer=0x274b4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274b4b0*, lpNumberOfBytesRead=0x1add88*=0x750, lpOverlapped=0x0) returned 1 [0075.863] ReadFile (in: hFile=0x158, lpBuffer=0x274b3e8, nNumberOfBytesToRead=0xb0, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274b3e8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0075.864] ReadFile (in: hFile=0x158, lpBuffer=0x274b4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274b4b0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0075.864] CloseHandle (hObject=0x158) returned 1 [0075.864] WriteFile (in: hFile=0x228, lpBuffer=0x2749a40*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2749a40*, lpNumberOfBytesWritten=0x1adc58*=0x780, lpOverlapped=0x0) returned 1 [0075.865] CloseHandle (hObject=0x228) returned 1 [0075.870] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0075.870] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0075.874] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0075.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0075.874] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0075.874] GetFileType (hFile=0x228) returned 0x1 [0075.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0075.874] GetFileType (hFile=0x228) returned 0x1 [0075.875] WriteFile (in: hFile=0x228, lpBuffer=0x2756190*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2756190*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0075.876] CloseHandle (hObject=0x228) returned 1 [0075.876] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0075.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0075.876] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0075.890] GetFileType (hFile=0x228) returned 0x1 [0075.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0075.890] GetFileType (hFile=0x228) returned 0x1 [0075.890] WriteFile (in: hFile=0x228, lpBuffer=0x2757258*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2757258*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0075.892] CloseHandle (hObject=0x228) returned 1 [0075.892] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0075.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0075.892] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0075.893] GetFileType (hFile=0x228) returned 0x1 [0075.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0075.893] GetFileType (hFile=0x228) returned 0x1 [0075.893] WriteFile (in: hFile=0x228, lpBuffer=0x275ded0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x275ded0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0075.894] CloseHandle (hObject=0x228) returned 1 [0075.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0075.894] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0075.894] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0075.894] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0075.907] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0075.908] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0075.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0075.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0075.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0075.909] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0075.910] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0075.910] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0075.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0075.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0075.912] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0075.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0075.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0075.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x56 [0075.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0075.913] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0075.915] GetFileType (hFile=0x228) returned 0x1 [0075.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0075.915] GetFileType (hFile=0x228) returned 0x1 [0076.416] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0076.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0076.416] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0076.417] GetFileType (hFile=0x158) returned 0x1 [0076.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0076.417] GetFileType (hFile=0x158) returned 0x1 [0076.417] ReadFile (in: hFile=0x158, lpBuffer=0x26a8ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26a8ad0*, lpNumberOfBytesRead=0x1add88*=0x391, lpOverlapped=0x0) returned 1 [0076.554] ReadFile (in: hFile=0x158, lpBuffer=0x26a8ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26a8ad0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0076.554] CloseHandle (hObject=0x158) returned 1 [0076.554] WriteFile (in: hFile=0x228, lpBuffer=0x26a7050*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26a7050*, lpNumberOfBytesWritten=0x1adc58*=0x3c0, lpOverlapped=0x0) returned 1 [0076.555] CloseHandle (hObject=0x228) returned 1 [0076.559] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0076.559] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 1 [0076.561] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0076.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0076.561] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0076.562] GetFileType (hFile=0x228) returned 0x1 [0076.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0076.562] GetFileType (hFile=0x228) returned 0x1 [0077.017] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0077.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0077.018] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0077.018] GetFileType (hFile=0x158) returned 0x1 [0077.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0077.018] GetFileType (hFile=0x158) returned 0x1 [0077.018] ReadFile (in: hFile=0x158, lpBuffer=0x27f00a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27f00a8*, lpNumberOfBytesRead=0x1add88*=0x5ac, lpOverlapped=0x0) returned 1 [0077.083] ReadFile (in: hFile=0x158, lpBuffer=0x27efe3c, nNumberOfBytesToRead=0x254, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27efe3c*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0077.084] ReadFile (in: hFile=0x158, lpBuffer=0x27f00a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27f00a8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0077.084] CloseHandle (hObject=0x158) returned 1 [0077.084] WriteFile (in: hFile=0x228, lpBuffer=0x27ee638*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x27ee638*, lpNumberOfBytesWritten=0x1adc58*=0x5d0, lpOverlapped=0x0) returned 1 [0077.085] CloseHandle (hObject=0x228) returned 1 [0077.087] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0077.087] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0077.102] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0077.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0077.102] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0077.103] GetFileType (hFile=0x228) returned 0x1 [0077.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0077.103] GetFileType (hFile=0x228) returned 0x1 [0077.137] WriteFile (in: hFile=0x228, lpBuffer=0x25fc4a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x25fc4a0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0077.138] CloseHandle (hObject=0x228) returned 1 [0077.139] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0077.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0077.139] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0077.140] GetFileType (hFile=0x228) returned 0x1 [0077.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0077.140] GetFileType (hFile=0x228) returned 0x1 [0077.140] WriteFile (in: hFile=0x228, lpBuffer=0x25fd568*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x25fd568*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0077.141] CloseHandle (hObject=0x228) returned 1 [0077.142] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0077.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0077.142] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0077.198] GetFileType (hFile=0x228) returned 0x1 [0077.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0077.198] GetFileType (hFile=0x228) returned 0x1 [0077.199] WriteFile (in: hFile=0x228, lpBuffer=0x26041e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26041e0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0077.199] CloseHandle (hObject=0x228) returned 1 [0077.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0077.200] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0077.200] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0077.200] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0077.228] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.228] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.231] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.231] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0077.231] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0077.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0077.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0077.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0077.232] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0077.232] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0077.232] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0077.233] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.233] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.233] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.235] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.235] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.235] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.235] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.235] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.236] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.236] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.236] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.236] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0077.236] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0077.236] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0077.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0077.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0077.238] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.EnyBenied", lpFilePart=0x0) returned 0x55 [0077.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0077.238] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0077.241] GetFileType (hFile=0x228) returned 0x1 [0077.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0077.241] GetFileType (hFile=0x228) returned 0x1 [0077.830] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0077.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0077.831] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0077.839] GetFileType (hFile=0x158) returned 0x1 [0077.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0077.839] GetFileType (hFile=0x158) returned 0x1 [0077.839] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.872] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.873] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.873] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.873] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.874] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.874] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.874] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.875] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.875] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.876] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.876] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.876] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.877] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.877] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.877] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.878] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.878] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.878] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.879] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.879] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.880] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.881] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.881] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.881] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.882] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.882] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.882] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.883] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.883] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.884] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.884] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.884] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.889] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.891] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.892] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.892] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.892] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.893] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.893] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.893] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.894] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.894] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.894] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.895] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.895] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.895] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.897] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.897] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.898] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.898] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.898] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.899] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.899] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.900] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.900] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.900] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.900] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.901] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.901] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.901] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.902] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.902] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.902] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.903] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.904] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.904] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.904] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.905] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.905] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.905] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.906] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.906] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.907] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.907] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.907] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.908] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.908] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.908] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.911] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.911] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.911] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.912] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.912] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.912] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.913] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.913] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.913] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.914] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.914] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.914] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.915] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.915] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.915] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.916] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.916] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.916] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.917] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.917] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.917] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.918] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.918] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.919] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.919] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.919] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.920] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.920] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.920] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.921] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.921] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.921] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.922] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.923] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.923] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.924] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.924] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.924] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.925] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.925] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.925] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.925] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.926] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.926] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.926] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.927] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.927] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.927] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.928] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.928] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.929] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.929] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.930] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.930] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.930] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.930] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.931] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.931] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.931] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.931] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.932] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.932] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.932] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.933] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.933] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.933] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0077.933] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x975, lpOverlapped=0x0) returned 1 [0077.934] ReadFile (in: hFile=0x158, lpBuffer=0x275242d, nNumberOfBytesToRead=0x28b, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x275242d*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0077.934] ReadFile (in: hFile=0x158, lpBuffer=0x27526d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27526d0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0077.934] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0077.934] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 1 [0077.941] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x56 [0077.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0077.941] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0077.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0078.950] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0078.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0078.951] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0078.951] GetFileType (hFile=0x158) returned 0x1 [0078.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0078.951] GetFileType (hFile=0x158) returned 0x1 [0078.952] ReadFile (in: hFile=0x158, lpBuffer=0x272e4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0078.971] WriteFile (in: hFile=0x228, lpBuffer=0x272ca40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x272ca40*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0078.972] ReadFile (in: hFile=0x158, lpBuffer=0x272e4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e4c0*, lpNumberOfBytesRead=0x1add88*=0x5b5, lpOverlapped=0x0) returned 1 [0078.986] ReadFile (in: hFile=0x158, lpBuffer=0x272e25d, nNumberOfBytesToRead=0x24b, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e25d*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0078.986] ReadFile (in: hFile=0x158, lpBuffer=0x272e4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e4c0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0078.987] CloseHandle (hObject=0x158) returned 1 [0078.987] WriteFile (in: hFile=0x228, lpBuffer=0x272ca40*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x272ca40*, lpNumberOfBytesWritten=0x1adc58*=0x5e0, lpOverlapped=0x0) returned 1 [0078.987] CloseHandle (hObject=0x228) returned 1 [0078.991] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0078.991] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 1 [0078.993] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.EnyBenied", lpFilePart=0x0) returned 0x59 [0078.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0078.993] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0078.994] GetFileType (hFile=0x228) returned 0x1 [0078.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0078.994] GetFileType (hFile=0x228) returned 0x1 [0079.565] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0079.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0079.565] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0079.565] GetFileType (hFile=0x158) returned 0x1 [0079.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0079.566] GetFileType (hFile=0x158) returned 0x1 [0079.566] ReadFile (in: hFile=0x158, lpBuffer=0x26569f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26569f8*, lpNumberOfBytesRead=0x1add88*=0x333, lpOverlapped=0x0) returned 1 [0079.585] ReadFile (in: hFile=0x158, lpBuffer=0x26569f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26569f8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0079.585] CloseHandle (hObject=0x158) returned 1 [0079.586] WriteFile (in: hFile=0x228, lpBuffer=0x2654f70*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2654f70*, lpNumberOfBytesWritten=0x1adc58*=0x360, lpOverlapped=0x0) returned 1 [0079.587] CloseHandle (hObject=0x228) returned 1 [0079.661] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0079.661] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 1 [0079.664] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0079.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0079.664] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0079.664] GetFileType (hFile=0x228) returned 0x1 [0079.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0079.665] GetFileType (hFile=0x228) returned 0x1 [0080.161] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0080.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0080.161] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0080.161] GetFileType (hFile=0x158) returned 0x1 [0080.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0080.161] GetFileType (hFile=0x158) returned 0x1 [0080.161] ReadFile (in: hFile=0x158, lpBuffer=0x279e018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x279e018*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0080.180] ReadFile (in: hFile=0x158, lpBuffer=0x279e018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x279e018*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0080.181] ReadFile (in: hFile=0x158, lpBuffer=0x279e018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x279e018*, lpNumberOfBytesRead=0x1add88*=0x488, lpOverlapped=0x0) returned 1 [0080.181] ReadFile (in: hFile=0x158, lpBuffer=0x279dc88, nNumberOfBytesToRead=0x378, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x279dc88*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0080.181] ReadFile (in: hFile=0x158, lpBuffer=0x279e018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x279e018*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0080.181] CloseHandle (hObject=0x158) returned 1 [0080.181] CloseHandle (hObject=0x228) returned 1 [0080.182] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0080.182] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0080.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0080.183] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0080.183] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", lpFilePart=0x0) returned 0x44 [0080.183] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0080.184] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0080.184] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0080.184] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0080.184] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0080.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0080.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0080.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0080.185] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0080.185] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", lpFilePart=0x0) returned 0x44 [0080.185] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0080.185] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0080.185] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0080.185] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0080.185] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0080.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0080.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4f [0080.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0080.188] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0080.188] GetFileType (hFile=0x228) returned 0x1 [0080.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0080.188] GetFileType (hFile=0x228) returned 0x1 [0080.188] WriteFile (in: hFile=0x228, lpBuffer=0x27ad008*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x27ad008*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0080.189] CloseHandle (hObject=0x228) returned 1 [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\ENYBENY.png", lpFilePart=0x0) returned 0x4f [0080.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0080.189] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0080.190] GetFileType (hFile=0x228) returned 0x1 [0080.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0080.190] GetFileType (hFile=0x228) returned 0x1 [0080.190] WriteFile (in: hFile=0x228, lpBuffer=0x27ae0d8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x27ae0d8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0080.191] CloseHandle (hObject=0x228) returned 1 [0080.192] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7a [0080.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0080.192] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0080.192] GetFileType (hFile=0x228) returned 0x1 [0080.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0080.192] GetFileType (hFile=0x228) returned 0x1 [0080.192] WriteFile (in: hFile=0x228, lpBuffer=0x27b4d68*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x27b4d68*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0080.193] CloseHandle (hObject=0x228) returned 1 [0080.195] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0080.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0080.196] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0080.196] GetFileType (hFile=0x228) returned 0x1 [0080.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0080.196] GetFileType (hFile=0x228) returned 0x1 [0080.196] WriteFile (in: hFile=0x228, lpBuffer=0x27bf1a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27bf1a0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0080.197] CloseHandle (hObject=0x228) returned 1 [0080.197] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0080.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0080.198] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0080.199] GetFileType (hFile=0x228) returned 0x1 [0080.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0080.199] GetFileType (hFile=0x228) returned 0x1 [0080.199] WriteFile (in: hFile=0x228, lpBuffer=0x27c0268*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x27c0268*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0080.200] CloseHandle (hObject=0x228) returned 1 [0080.201] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0080.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0080.201] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0080.201] GetFileType (hFile=0x228) returned 0x1 [0080.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0080.201] GetFileType (hFile=0x228) returned 0x1 [0080.201] WriteFile (in: hFile=0x228, lpBuffer=0x27c6ee0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27c6ee0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0080.202] CloseHandle (hObject=0x228) returned 1 [0080.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0080.203] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0080.203] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0080.203] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0080.215] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0080.216] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0080.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0080.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0080.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0080.217] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0080.217] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0080.217] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0080.218] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0080.219] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0080.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0080.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0080.220] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.EnyBenied", lpFilePart=0x0) returned 0x59 [0080.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0080.220] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0080.221] GetFileType (hFile=0x228) returned 0x1 [0080.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0080.221] GetFileType (hFile=0x228) returned 0x1 [0080.693] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0080.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0080.693] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0080.693] GetFileType (hFile=0x158) returned 0x1 [0080.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0080.693] GetFileType (hFile=0x158) returned 0x1 [0080.693] ReadFile (in: hFile=0x158, lpBuffer=0x2711bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2711bc8*, lpNumberOfBytesRead=0x1add88*=0x333, lpOverlapped=0x0) returned 1 [0080.703] ReadFile (in: hFile=0x158, lpBuffer=0x2711bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2711bc8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0080.703] CloseHandle (hObject=0x158) returned 1 [0080.703] WriteFile (in: hFile=0x228, lpBuffer=0x2710140*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2710140*, lpNumberOfBytesWritten=0x1adc58*=0x360, lpOverlapped=0x0) returned 1 [0080.704] CloseHandle (hObject=0x228) returned 1 [0080.705] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0080.705] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 1 [0080.707] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0080.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0080.707] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0080.707] GetFileType (hFile=0x228) returned 0x1 [0080.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0080.708] GetFileType (hFile=0x228) returned 0x1 [0081.165] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0081.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0081.165] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0081.165] GetFileType (hFile=0x158) returned 0x1 [0081.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0081.165] GetFileType (hFile=0x158) returned 0x1 [0081.165] ReadFile (in: hFile=0x158, lpBuffer=0x2659220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2659220*, lpNumberOfBytesRead=0x1add88*=0xa40, lpOverlapped=0x0) returned 1 [0081.196] ReadFile (in: hFile=0x158, lpBuffer=0x2659048, nNumberOfBytesToRead=0x1c0, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2659048*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0081.197] ReadFile (in: hFile=0x158, lpBuffer=0x2659220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2659220*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0081.197] CloseHandle (hObject=0x158) returned 1 [0081.197] WriteFile (in: hFile=0x228, lpBuffer=0x26577b0*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26577b0*, lpNumberOfBytesWritten=0x1adc58*=0xa70, lpOverlapped=0x0) returned 1 [0081.198] CloseHandle (hObject=0x228) returned 1 [0081.199] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0081.199] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0081.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0081.200] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0081.200] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", lpFilePart=0x0) returned 0x4c [0081.200] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0081.209] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0081.210] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0081.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0081.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0081.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0081.211] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0081.211] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", lpFilePart=0x0) returned 0x4c [0081.211] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0081.212] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.213] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.213] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.213] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.213] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0081.213] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0081.213] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0081.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0081.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0081.215] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.EnyBenied", lpFilePart=0x0) returned 0x63 [0081.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0081.215] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0081.220] GetFileType (hFile=0x228) returned 0x1 [0081.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0081.220] GetFileType (hFile=0x228) returned 0x1 [0081.743] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0081.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0081.743] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0081.744] GetFileType (hFile=0x158) returned 0x1 [0081.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0081.744] GetFileType (hFile=0x158) returned 0x1 [0081.744] ReadFile (in: hFile=0x158, lpBuffer=0x27a4e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a4e20*, lpNumberOfBytesRead=0x1add08*=0x545, lpOverlapped=0x0) returned 1 [0081.752] ReadFile (in: hFile=0x158, lpBuffer=0x27a4b4d, nNumberOfBytesToRead=0x2bb, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a4b4d*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0081.753] ReadFile (in: hFile=0x158, lpBuffer=0x27a4e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a4e20*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0081.753] CloseHandle (hObject=0x158) returned 1 [0081.753] WriteFile (in: hFile=0x228, lpBuffer=0x27a3388*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x27a3388*, lpNumberOfBytesWritten=0x1adbd8*=0x570, lpOverlapped=0x0) returned 1 [0081.754] CloseHandle (hObject=0x228) returned 1 [0081.759] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0081.759] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 1 [0081.761] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.EnyBenied", lpFilePart=0x0) returned 0x62 [0081.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0081.761] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0081.762] GetFileType (hFile=0x228) returned 0x1 [0081.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0081.762] GetFileType (hFile=0x228) returned 0x1 [0082.390] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0082.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0082.391] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0082.392] GetFileType (hFile=0x158) returned 0x1 [0082.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0082.392] GetFileType (hFile=0x158) returned 0x1 [0082.392] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.407] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.408] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.409] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.409] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.410] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.410] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.410] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.410] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.411] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.411] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.411] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.411] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.411] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.412] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.412] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.412] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.412] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.413] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.413] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.413] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.413] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.413] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.414] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.414] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.414] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.414] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.414] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.415] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.417] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.417] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.417] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.418] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.418] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.418] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.418] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.418] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.419] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.419] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.419] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.419] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.420] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.420] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.420] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.420] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.420] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.421] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.421] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.421] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.421] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.421] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.422] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.422] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.422] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.422] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.422] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.423] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.423] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.423] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.423] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.423] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.424] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.424] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.424] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.424] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.424] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.425] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.425] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.425] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.425] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.425] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.426] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.426] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.426] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.426] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.426] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.427] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.427] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.427] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.427] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.427] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.428] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.428] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.428] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.428] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.428] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.429] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.429] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.429] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.429] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.430] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.430] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.430] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.434] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.435] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.435] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.435] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.435] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.436] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.436] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.436] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.436] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.437] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.437] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.437] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.437] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.438] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.438] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.438] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.438] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.438] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.438] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.439] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.439] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.439] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.439] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.439] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.440] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.440] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.440] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.440] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.440] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.441] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.441] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.441] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.441] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.442] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.442] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.442] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.442] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.443] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.443] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.444] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.444] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.444] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.444] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.444] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.445] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.445] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.445] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.445] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.445] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.446] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.446] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.446] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.446] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.446] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.447] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.447] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.447] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.447] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.447] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.448] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.448] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.448] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.448] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.448] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.451] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.451] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.451] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.451] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.452] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.452] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.452] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.452] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.453] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.453] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.453] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.453] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.453] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.453] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.454] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.454] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.454] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.454] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.454] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.455] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.455] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.455] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.455] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.455] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.456] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.456] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.456] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.456] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.456] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.457] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.457] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.457] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.457] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.458] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.458] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.458] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.458] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.458] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.459] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.459] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.459] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.459] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.460] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.460] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.460] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.460] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.460] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.461] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.461] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.461] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.461] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.462] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.462] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.462] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.462] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.462] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.463] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.463] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.463] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.463] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.463] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.464] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.464] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.464] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.465] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.465] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.465] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.466] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.466] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.466] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.466] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.466] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.467] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.467] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.467] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.467] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.467] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.468] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.468] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.468] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.468] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.468] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.469] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.469] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.469] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.469] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.469] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.470] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.470] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.470] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.470] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.470] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.471] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.471] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.471] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.471] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.471] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.471] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.472] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.472] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.472] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.473] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.473] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.473] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.473] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.474] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.474] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.474] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.474] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.474] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.475] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.475] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.475] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.475] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.475] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.475] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.476] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.476] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.476] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.476] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.476] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.476] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.477] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.477] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.477] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.477] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.477] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.478] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.478] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.478] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.478] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.478] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0082.479] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adc98*=0x1000, lpOverlapped=0x0) returned 1 [0082.479] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x975, lpOverlapped=0x0) returned 1 [0082.479] ReadFile (in: hFile=0x158, lpBuffer=0x26ec48d, nNumberOfBytesToRead=0x28b, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec48d*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0082.479] ReadFile (in: hFile=0x158, lpBuffer=0x26ec730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26ec730*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0082.480] WriteFile (in: hFile=0x228, lpBuffer=0x26eac98*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26eac98*, lpNumberOfBytesWritten=0x1adbd8*=0x9a0, lpOverlapped=0x0) returned 1 [0082.481] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0082.481] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 1 [0082.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\ENYBENY.TXT", lpFilePart=0x0) returned 0x57 [0082.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0082.487] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0082.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0082.489] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\ENYBENY.png", lpFilePart=0x0) returned 0x57 [0082.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0082.490] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0082.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0082.492] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x82 [0082.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0082.492] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0082.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0082.494] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0082.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0082.494] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0082.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0082.495] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0082.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0082.495] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0082.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0082.499] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0082.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0082.500] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0082.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0082.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0082.501] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0082.501] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0082.501] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0082.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0082.514] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0082.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0082.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0082.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0082.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0082.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0082.515] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0082.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0082.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0082.519] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0082.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0082.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0082.520] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied", lpFilePart=0x0) returned 0x57 [0082.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0082.520] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0082.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0083.185] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0083.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0083.185] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0083.186] GetFileType (hFile=0x158) returned 0x1 [0083.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0083.186] GetFileType (hFile=0x158) returned 0x1 [0083.186] ReadFile (in: hFile=0x158, lpBuffer=0x26f3400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f3400*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0083.203] WriteFile (in: hFile=0x228, lpBuffer=0x26f1980*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26f1980*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0083.204] ReadFile (in: hFile=0x158, lpBuffer=0x26f3400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f3400*, lpNumberOfBytesRead=0x1add88*=0xb2, lpOverlapped=0x0) returned 1 [0083.216] ReadFile (in: hFile=0x158, lpBuffer=0x26f3400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f3400*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0083.216] CloseHandle (hObject=0x158) returned 1 [0083.216] WriteFile (in: hFile=0x228, lpBuffer=0x26f1980*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26f1980*, lpNumberOfBytesWritten=0x1adc58*=0xe0, lpOverlapped=0x0) returned 1 [0083.217] CloseHandle (hObject=0x228) returned 1 [0083.219] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0083.219] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0083.224] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.EnyBenied", lpFilePart=0x0) returned 0x57 [0083.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0083.224] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0083.225] GetFileType (hFile=0x228) returned 0x1 [0083.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0083.225] GetFileType (hFile=0x228) returned 0x1 [0083.896] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0083.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0083.896] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0083.898] GetFileType (hFile=0x158) returned 0x1 [0083.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0083.898] GetFileType (hFile=0x158) returned 0x1 [0083.898] ReadFile (in: hFile=0x158, lpBuffer=0x263b928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x263b928*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0083.916] WriteFile (in: hFile=0x228, lpBuffer=0x2639ea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2639ea8*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0083.917] ReadFile (in: hFile=0x158, lpBuffer=0x263b928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x263b928*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0083.918] WriteFile (in: hFile=0x228, lpBuffer=0x2639ea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2639ea8*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0083.918] ReadFile (in: hFile=0x158, lpBuffer=0x263b928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x263b928*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0083.918] WriteFile (in: hFile=0x228, lpBuffer=0x2639ea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2639ea8*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0083.918] ReadFile (in: hFile=0x158, lpBuffer=0x263b928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x263b928*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0083.918] WriteFile (in: hFile=0x228, lpBuffer=0x2639ea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2639ea8*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0083.918] ReadFile (in: hFile=0x158, lpBuffer=0x263b928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x263b928*, lpNumberOfBytesRead=0x1add88*=0x1d4, lpOverlapped=0x0) returned 1 [0083.919] ReadFile (in: hFile=0x158, lpBuffer=0x263b928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x263b928*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0083.919] CloseHandle (hObject=0x158) returned 1 [0083.919] WriteFile (in: hFile=0x228, lpBuffer=0x2639ea8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2639ea8*, lpNumberOfBytesWritten=0x1adc58*=0x200, lpOverlapped=0x0) returned 1 [0083.919] CloseHandle (hObject=0x228) returned 1 [0083.924] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0083.924] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 1 [0083.929] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0083.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0083.929] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0083.929] GetFileType (hFile=0x228) returned 0x1 [0083.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0083.930] GetFileType (hFile=0x228) returned 0x1 [0084.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0084.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0084.488] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0084.488] GetFileType (hFile=0x158) returned 0x1 [0084.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0084.488] GetFileType (hFile=0x158) returned 0x1 [0084.488] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0084.510] WriteFile (in: hFile=0x228, lpBuffer=0x27854f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27854f0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0084.511] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0084.512] WriteFile (in: hFile=0x228, lpBuffer=0x27854f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27854f0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0084.512] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0084.512] WriteFile (in: hFile=0x228, lpBuffer=0x27854f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27854f0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0084.513] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0084.513] WriteFile (in: hFile=0x228, lpBuffer=0x27854f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27854f0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0084.513] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0084.513] WriteFile (in: hFile=0x228, lpBuffer=0x27854f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27854f0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0084.514] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0084.514] WriteFile (in: hFile=0x228, lpBuffer=0x27854f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27854f0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0084.514] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0084.514] WriteFile (in: hFile=0x228, lpBuffer=0x27854f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27854f0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0084.514] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x976, lpOverlapped=0x0) returned 1 [0084.514] ReadFile (in: hFile=0x158, lpBuffer=0x2786cbe, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786cbe*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0084.515] ReadFile (in: hFile=0x158, lpBuffer=0x2786f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2786f60*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0084.515] CloseHandle (hObject=0x158) returned 1 [0084.515] WriteFile (in: hFile=0x228, lpBuffer=0x27854f0*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x27854f0*, lpNumberOfBytesWritten=0x1adc58*=0x9a0, lpOverlapped=0x0) returned 1 [0084.515] CloseHandle (hObject=0x228) returned 1 [0084.519] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0084.519] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0084.528] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0084.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0084.528] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0084.529] GetFileType (hFile=0x228) returned 0x1 [0084.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0084.529] GetFileType (hFile=0x228) returned 0x1 [0084.529] WriteFile (in: hFile=0x228, lpBuffer=0x2799118*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2799118*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0084.530] CloseHandle (hObject=0x228) returned 1 [0084.530] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0084.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0084.530] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0084.531] GetFileType (hFile=0x228) returned 0x1 [0084.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0084.531] GetFileType (hFile=0x228) returned 0x1 [0084.532] WriteFile (in: hFile=0x228, lpBuffer=0x279a1e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x279a1e0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0084.533] CloseHandle (hObject=0x228) returned 1 [0084.533] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0084.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0084.533] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0084.534] GetFileType (hFile=0x228) returned 0x1 [0084.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0084.534] GetFileType (hFile=0x228) returned 0x1 [0084.534] WriteFile (in: hFile=0x228, lpBuffer=0x27a0e58*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27a0e58*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0084.535] CloseHandle (hObject=0x228) returned 1 [0084.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0084.535] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0084.535] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0084.535] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0084.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.564] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0084.564] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0084.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0084.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0084.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0084.565] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0084.565] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0084.565] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0084.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0084.569] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0084.569] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0084.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0084.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0084.571] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied", lpFilePart=0x0) returned 0x57 [0084.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0084.571] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0084.572] GetFileType (hFile=0x228) returned 0x1 [0084.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0084.573] GetFileType (hFile=0x228) returned 0x1 [0085.318] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0085.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0085.319] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0085.319] GetFileType (hFile=0x158) returned 0x1 [0085.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0085.319] GetFileType (hFile=0x158) returned 0x1 [0085.319] ReadFile (in: hFile=0x158, lpBuffer=0x26ee190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ee190*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0085.334] WriteFile (in: hFile=0x228, lpBuffer=0x26ec710*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26ec710*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0085.335] ReadFile (in: hFile=0x158, lpBuffer=0x26ee190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ee190*, lpNumberOfBytesRead=0x1add88*=0xb2, lpOverlapped=0x0) returned 1 [0085.335] ReadFile (in: hFile=0x158, lpBuffer=0x26ee190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ee190*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0085.335] CloseHandle (hObject=0x158) returned 1 [0085.336] WriteFile (in: hFile=0x228, lpBuffer=0x26ec710*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26ec710*, lpNumberOfBytesWritten=0x1adc58*=0xe0, lpOverlapped=0x0) returned 1 [0085.336] CloseHandle (hObject=0x228) returned 1 [0085.337] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0085.337] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0085.339] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.EnyBenied", lpFilePart=0x0) returned 0x56 [0085.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0085.339] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0085.339] GetFileType (hFile=0x228) returned 0x1 [0085.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0085.339] GetFileType (hFile=0x228) returned 0x1 [0086.021] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0086.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0086.021] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0086.022] GetFileType (hFile=0x158) returned 0x1 [0086.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0086.022] GetFileType (hFile=0x158) returned 0x1 [0086.023] ReadFile (in: hFile=0x158, lpBuffer=0x26366b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26366b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0086.045] WriteFile (in: hFile=0x228, lpBuffer=0x2634c38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2634c38*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0086.046] ReadFile (in: hFile=0x158, lpBuffer=0x26366b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26366b8*, lpNumberOfBytesRead=0x1add88*=0x915, lpOverlapped=0x0) returned 1 [0086.047] ReadFile (in: hFile=0x158, lpBuffer=0x26363b5, nNumberOfBytesToRead=0x2eb, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26363b5*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0086.047] ReadFile (in: hFile=0x158, lpBuffer=0x26366b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26366b8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0086.047] CloseHandle (hObject=0x158) returned 1 [0086.047] WriteFile (in: hFile=0x228, lpBuffer=0x2634c38*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2634c38*, lpNumberOfBytesWritten=0x1adc58*=0x940, lpOverlapped=0x0) returned 1 [0086.047] CloseHandle (hObject=0x228) returned 1 [0086.053] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0086.053] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml")) returned 1 [0086.055] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0086.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0086.055] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0086.056] GetFileType (hFile=0x228) returned 0x1 [0086.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0086.056] GetFileType (hFile=0x228) returned 0x1 [0086.583] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0086.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0086.583] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0086.584] GetFileType (hFile=0x158) returned 0x1 [0086.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0086.584] GetFileType (hFile=0x158) returned 0x1 [0086.585] ReadFile (in: hFile=0x158, lpBuffer=0x277f310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f310*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0086.842] WriteFile (in: hFile=0x228, lpBuffer=0x277d8a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x277d8a0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0086.846] ReadFile (in: hFile=0x158, lpBuffer=0x277f310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f310*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0086.846] WriteFile (in: hFile=0x228, lpBuffer=0x277d8a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x277d8a0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0086.847] ReadFile (in: hFile=0x158, lpBuffer=0x277f310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f310*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0086.847] WriteFile (in: hFile=0x228, lpBuffer=0x277d8a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x277d8a0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0086.847] ReadFile (in: hFile=0x158, lpBuffer=0x277f310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f310*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0086.847] WriteFile (in: hFile=0x228, lpBuffer=0x277d8a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x277d8a0*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0086.847] ReadFile (in: hFile=0x158, lpBuffer=0x277f310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f310*, lpNumberOfBytesRead=0x1add88*=0x12b, lpOverlapped=0x0) returned 1 [0086.847] ReadFile (in: hFile=0x158, lpBuffer=0x277f310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277f310*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0086.848] CloseHandle (hObject=0x158) returned 1 [0086.848] WriteFile (in: hFile=0x228, lpBuffer=0x277d8a0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x277d8a0*, lpNumberOfBytesWritten=0x1adc58*=0x150, lpOverlapped=0x0) returned 1 [0086.848] CloseHandle (hObject=0x228) returned 1 [0086.860] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0086.860] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0086.864] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0086.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0086.865] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0086.865] GetFileType (hFile=0x228) returned 0x1 [0086.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0086.865] GetFileType (hFile=0x228) returned 0x1 [0086.865] WriteFile (in: hFile=0x228, lpBuffer=0x278db20*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x278db20*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0086.867] CloseHandle (hObject=0x228) returned 1 [0086.867] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0086.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0086.867] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0086.868] GetFileType (hFile=0x228) returned 0x1 [0086.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0086.868] GetFileType (hFile=0x228) returned 0x1 [0086.869] WriteFile (in: hFile=0x228, lpBuffer=0x278ebe8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x278ebe8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0086.870] CloseHandle (hObject=0x228) returned 1 [0086.870] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0086.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0086.870] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0086.870] GetFileType (hFile=0x228) returned 0x1 [0086.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0086.871] GetFileType (hFile=0x228) returned 0x1 [0086.871] WriteFile (in: hFile=0x228, lpBuffer=0x2795860*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2795860*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0086.872] CloseHandle (hObject=0x228) returned 1 [0086.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0086.872] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0086.872] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0086.872] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0086.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.913] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0086.913] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0086.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0086.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0086.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0086.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0086.914] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0086.914] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0086.915] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.915] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.915] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.915] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.915] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.915] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0086.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0086.917] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0086.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0086.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0086.918] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied", lpFilePart=0x0) returned 0x57 [0086.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0086.918] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0086.919] GetFileType (hFile=0x228) returned 0x1 [0086.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0086.919] GetFileType (hFile=0x228) returned 0x1 [0087.417] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0087.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0087.417] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0087.417] GetFileType (hFile=0x158) returned 0x1 [0087.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0087.417] GetFileType (hFile=0x158) returned 0x1 [0087.417] ReadFile (in: hFile=0x158, lpBuffer=0x26e2a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26e2a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0087.432] ReadFile (in: hFile=0x158, lpBuffer=0x26e2a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26e2a70*, lpNumberOfBytesRead=0x1add88*=0xb2, lpOverlapped=0x0) returned 1 [0087.434] ReadFile (in: hFile=0x158, lpBuffer=0x26e2a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26e2a70*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0087.434] CloseHandle (hObject=0x158) returned 1 [0087.434] WriteFile (in: hFile=0x228, lpBuffer=0x26e0ff0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26e0ff0*, lpNumberOfBytesWritten=0x1adc58*=0xe0, lpOverlapped=0x0) returned 1 [0087.435] CloseHandle (hObject=0x228) returned 1 [0087.435] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0087.435] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0087.437] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied", lpFilePart=0x0) returned 0x52 [0087.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0087.437] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0087.437] GetFileType (hFile=0x228) returned 0x1 [0087.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0087.437] GetFileType (hFile=0x228) returned 0x1 [0087.946] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0087.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0087.946] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0087.947] GetFileType (hFile=0x158) returned 0x1 [0087.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0087.947] GetFileType (hFile=0x158) returned 0x1 [0087.947] ReadFile (in: hFile=0x158, lpBuffer=0x262af80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x262af80*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0087.956] ReadFile (in: hFile=0x158, lpBuffer=0x262af80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x262af80*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0087.957] ReadFile (in: hFile=0x158, lpBuffer=0x262af80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x262af80*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0087.957] ReadFile (in: hFile=0x158, lpBuffer=0x262af80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x262af80*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0087.958] ReadFile (in: hFile=0x158, lpBuffer=0x262af80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x262af80*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0087.958] ReadFile (in: hFile=0x158, lpBuffer=0x262af80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x262af80*, lpNumberOfBytesRead=0x1add88*=0x61, lpOverlapped=0x0) returned 1 [0087.958] ReadFile (in: hFile=0x158, lpBuffer=0x262af80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x262af80*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0087.958] CloseHandle (hObject=0x158) returned 1 [0087.958] CloseHandle (hObject=0x228) returned 1 [0087.963] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0087.963] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0087.965] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.EnyBenied", lpFilePart=0x0) returned 0x55 [0087.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0087.965] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.EnyBenied" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0087.966] GetFileType (hFile=0x228) returned 0x1 [0087.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0087.966] GetFileType (hFile=0x228) returned 0x1 [0088.434] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0088.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0088.434] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0088.435] GetFileType (hFile=0x158) returned 0x1 [0088.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.435] GetFileType (hFile=0x158) returned 0x1 [0088.436] ReadFile (in: hFile=0x158, lpBuffer=0x2777488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2777488*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0088.452] WriteFile (in: hFile=0x228, lpBuffer=0x2775a10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2775a10*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0088.453] ReadFile (in: hFile=0x158, lpBuffer=0x2777488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2777488*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0088.453] WriteFile (in: hFile=0x228, lpBuffer=0x2775a10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2775a10*, lpNumberOfBytesWritten=0x1add18*=0x1000, lpOverlapped=0x0) returned 1 [0088.454] ReadFile (in: hFile=0x158, lpBuffer=0x2777488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2777488*, lpNumberOfBytesRead=0x1add88*=0x213, lpOverlapped=0x0) returned 1 [0088.454] ReadFile (in: hFile=0x158, lpBuffer=0x2777488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2777488*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0088.454] CloseHandle (hObject=0x158) returned 1 [0088.454] WriteFile (in: hFile=0x228, lpBuffer=0x2775a10*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2775a10*, lpNumberOfBytesWritten=0x1adc58*=0x240, lpOverlapped=0x0) returned 1 [0088.454] CloseHandle (hObject=0x228) returned 1 [0088.459] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0088.459] DeleteFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml")) returned 1 [0088.463] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0088.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.463] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.464] GetFileType (hFile=0x228) returned 0x1 [0088.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.464] GetFileType (hFile=0x228) returned 0x1 [0088.464] WriteFile (in: hFile=0x228, lpBuffer=0x2783cd0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2783cd0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0088.465] CloseHandle (hObject=0x228) returned 1 [0088.465] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0088.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.465] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.466] GetFileType (hFile=0x228) returned 0x1 [0088.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0088.466] GetFileType (hFile=0x228) returned 0x1 [0088.466] WriteFile (in: hFile=0x228, lpBuffer=0x2784d98*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2784d98*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0088.467] CloseHandle (hObject=0x228) returned 1 [0088.468] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0088.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.468] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.468] GetFileType (hFile=0x228) returned 0x1 [0088.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.468] GetFileType (hFile=0x228) returned 0x1 [0088.468] WriteFile (in: hFile=0x228, lpBuffer=0x278ba10*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x278ba10*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0088.469] CloseHandle (hObject=0x228) returned 1 [0088.471] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\ENYBENY.TXT", lpFilePart=0x0) returned 0x21 [0088.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.471] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\ENYBENY.TXT" (normalized: "c:\\msocache\\all users\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.473] GetFileType (hFile=0x228) returned 0x1 [0088.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.473] GetFileType (hFile=0x228) returned 0x1 [0088.473] WriteFile (in: hFile=0x228, lpBuffer=0x2795da8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2795da8*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0088.474] CloseHandle (hObject=0x228) returned 1 [0088.474] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\ENYBENY.png", lpFilePart=0x0) returned 0x21 [0088.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.474] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\ENYBENY.png" (normalized: "c:\\msocache\\all users\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.474] GetFileType (hFile=0x228) returned 0x1 [0088.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0088.474] GetFileType (hFile=0x228) returned 0x1 [0088.474] WriteFile (in: hFile=0x228, lpBuffer=0x2796e20*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x2796e20*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0088.475] CloseHandle (hObject=0x228) returned 1 [0088.476] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4c [0088.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.476] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\all users\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.476] GetFileType (hFile=0x228) returned 0x1 [0088.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.476] GetFileType (hFile=0x228) returned 0x1 [0088.476] WriteFile (in: hFile=0x228, lpBuffer=0x279d9a8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x279d9a8*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0088.477] CloseHandle (hObject=0x228) returned 1 [0088.477] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x17 [0088.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0088.477] CreateFileW (lpFileName="C:\\MSOCache\\ENYBENY.TXT" (normalized: "c:\\msocache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.478] GetFileType (hFile=0x228) returned 0x1 [0088.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0088.478] GetFileType (hFile=0x228) returned 0x1 [0088.478] WriteFile (in: hFile=0x228, lpBuffer=0x27a7d10*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x27a7d10*, lpNumberOfBytesWritten=0x1add98*=0x394, lpOverlapped=0x0) returned 1 [0088.479] CloseHandle (hObject=0x228) returned 1 [0088.479] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad8d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\ENYBENY.png", lpFilePart=0x0) returned 0x17 [0088.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.479] CreateFileW (lpFileName="C:\\MSOCache\\ENYBENY.png" (normalized: "c:\\msocache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.480] GetFileType (hFile=0x228) returned 0x1 [0088.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add20) returned 1 [0088.480] GetFileType (hFile=0x228) returned 0x1 [0088.480] WriteFile (in: hFile=0x228, lpBuffer=0x27a8d70*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1aded8, lpOverlapped=0x0 | out: lpBuffer=0x27a8d70*, lpNumberOfBytesWritten=0x1aded8*=0x50df, lpOverlapped=0x0) returned 1 [0088.481] CloseHandle (hObject=0x228) returned 1 [0088.481] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x42 [0088.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0088.481] CreateFileW (lpFileName="C:\\MSOCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\msocache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.483] GetFileType (hFile=0x228) returned 0x1 [0088.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0088.484] GetFileType (hFile=0x228) returned 0x1 [0088.484] WriteFile (in: hFile=0x228, lpBuffer=0x27af8b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x27af8b0*, lpNumberOfBytesWritten=0x1add98*=0xc6, lpOverlapped=0x0) returned 1 [0088.485] CloseHandle (hObject=0x228) returned 1 [0088.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0088.485] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0088.485] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\", lpFilePart=0x0) returned 0xc [0088.485] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0600 [0088.485] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.486] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.486] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0088.486] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0088.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0088.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0088.486] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0088.486] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\", lpFilePart=0x0) returned 0xc [0088.486] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0600 [0088.486] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.486] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.486] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0088.487] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0088.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0088.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.487] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0088.487] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\", lpFilePart=0x0) returned 0x12 [0088.487] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0088.487] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.487] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0088.487] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0088.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0088.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.487] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0088.488] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\", lpFilePart=0x0) returned 0x12 [0088.488] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0088.488] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.488] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0088.488] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0088.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0088.488] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\ENYBENY.TXT", lpFilePart=0x0) returned 0x1d [0088.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.488] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\ENYBENY.TXT" (normalized: "c:\\perflogs\\admin\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.488] GetFileType (hFile=0x228) returned 0x1 [0088.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.489] GetFileType (hFile=0x228) returned 0x1 [0088.489] WriteFile (in: hFile=0x228, lpBuffer=0x27bc9a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27bc9a0*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0088.489] CloseHandle (hObject=0x228) returned 1 [0088.490] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\ENYBENY.png", lpFilePart=0x0) returned 0x1d [0088.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.490] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\ENYBENY.png" (normalized: "c:\\perflogs\\admin\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.491] GetFileType (hFile=0x228) returned 0x1 [0088.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0088.491] GetFileType (hFile=0x228) returned 0x1 [0088.491] WriteFile (in: hFile=0x228, lpBuffer=0x27bda10*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x27bda10*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0088.492] CloseHandle (hObject=0x228) returned 1 [0088.493] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x48 [0088.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.493] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\perflogs\\admin\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.493] GetFileType (hFile=0x228) returned 0x1 [0088.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.493] GetFileType (hFile=0x228) returned 0x1 [0088.493] WriteFile (in: hFile=0x228, lpBuffer=0x27c4580*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x27c4580*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0088.494] CloseHandle (hObject=0x228) returned 1 [0088.494] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x17 [0088.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0088.494] CreateFileW (lpFileName="C:\\PerfLogs\\ENYBENY.TXT" (normalized: "c:\\perflogs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.495] GetFileType (hFile=0x228) returned 0x1 [0088.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0088.495] GetFileType (hFile=0x228) returned 0x1 [0088.495] WriteFile (in: hFile=0x228, lpBuffer=0x27ce8e8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x27ce8e8*, lpNumberOfBytesWritten=0x1add98*=0x394, lpOverlapped=0x0) returned 1 [0088.496] CloseHandle (hObject=0x228) returned 1 [0088.496] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad8d0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\ENYBENY.png", lpFilePart=0x0) returned 0x17 [0088.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.496] CreateFileW (lpFileName="C:\\PerfLogs\\ENYBENY.png" (normalized: "c:\\perflogs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.497] GetFileType (hFile=0x228) returned 0x1 [0088.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add20) returned 1 [0088.497] GetFileType (hFile=0x228) returned 0x1 [0088.497] WriteFile (in: hFile=0x228, lpBuffer=0x27cf948*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1aded8, lpOverlapped=0x0 | out: lpBuffer=0x27cf948*, lpNumberOfBytesWritten=0x1aded8*=0x50df, lpOverlapped=0x0) returned 1 [0088.498] CloseHandle (hObject=0x228) returned 1 [0088.498] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x42 [0088.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0088.498] CreateFileW (lpFileName="C:\\PerfLogs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\perflogs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.507] GetFileType (hFile=0x228) returned 0x1 [0088.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0088.507] GetFileType (hFile=0x228) returned 0x1 [0088.507] WriteFile (in: hFile=0x228, lpBuffer=0x27d6488*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x27d6488*, lpNumberOfBytesWritten=0x1add98*=0xc6, lpOverlapped=0x0) returned 1 [0088.508] CloseHandle (hObject=0x228) returned 1 [0088.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0088.508] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0088.509] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\", lpFilePart=0x0) returned 0xf [0088.509] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0600 [0088.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0088.511] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0088.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0088.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0088.511] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0088.511] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\", lpFilePart=0x0) returned 0xf [0088.511] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0600 [0088.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0088.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0088.513] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0088.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0088.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.513] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0088.513] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\", lpFilePart=0x0) returned 0x15 [0088.513] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0088.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0088.515] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0088.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0088.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.515] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0088.515] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\", lpFilePart=0x0) returned 0x15 [0088.515] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0088.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0088.516] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0088.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0088.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.516] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0088.516] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x1d [0088.516] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.517] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.517] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0088.517] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x1d [0088.517] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.518] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.518] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0088.518] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x22 [0088.518] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.519] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.519] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0088.519] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x22 [0088.519] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.520] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.520] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0088.520] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x2c [0088.520] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.522] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.522] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.523] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0088.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x2c [0088.523] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.524] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.524] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0088.524] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x35 [0088.524] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0088.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0088.525] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0088.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0088.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.525] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0088.525] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x35 [0088.525] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0088.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0088.526] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0088.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0088.526] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.TXT", lpFilePart=0x0) returned 0x40 [0088.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0088.526] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0088.529] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png", lpFilePart=0x0) returned 0x40 [0088.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0088.529] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0088.536] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6b [0088.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0088.536] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0088.539] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.TXT", lpFilePart=0x0) returned 0x37 [0088.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.552] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.554] GetFileType (hFile=0x228) returned 0x1 [0088.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.554] GetFileType (hFile=0x228) returned 0x1 [0088.554] WriteFile (in: hFile=0x228, lpBuffer=0x26011e0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26011e0*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0088.555] CloseHandle (hObject=0x228) returned 1 [0088.556] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png", lpFilePart=0x0) returned 0x37 [0088.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0088.556] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.556] GetFileType (hFile=0x228) returned 0x1 [0088.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0088.556] GetFileType (hFile=0x228) returned 0x1 [0088.556] WriteFile (in: hFile=0x228, lpBuffer=0x2602280*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x2602280*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0088.557] CloseHandle (hObject=0x228) returned 1 [0088.558] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x62 [0088.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.558] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.571] GetFileType (hFile=0x228) returned 0x1 [0088.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.571] GetFileType (hFile=0x228) returned 0x1 [0088.571] WriteFile (in: hFile=0x228, lpBuffer=0x2608e80*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x2608e80*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0088.572] CloseHandle (hObject=0x228) returned 1 [0088.575] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2d [0088.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.575] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.576] GetFileType (hFile=0x228) returned 0x1 [0088.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.576] GetFileType (hFile=0x228) returned 0x1 [0088.576] WriteFile (in: hFile=0x228, lpBuffer=0x2613248*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2613248*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0088.578] CloseHandle (hObject=0x228) returned 1 [0088.578] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\ENYBENY.png", lpFilePart=0x0) returned 0x2d [0088.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.578] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\ENYBENY.png" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.578] GetFileType (hFile=0x228) returned 0x1 [0088.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0088.578] GetFileType (hFile=0x228) returned 0x1 [0088.578] WriteFile (in: hFile=0x228, lpBuffer=0x26142d8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26142d8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0088.580] CloseHandle (hObject=0x228) returned 1 [0088.580] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x58 [0088.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.580] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.589] GetFileType (hFile=0x228) returned 0x1 [0088.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.589] GetFileType (hFile=0x228) returned 0x1 [0088.589] WriteFile (in: hFile=0x228, lpBuffer=0x261aea8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x261aea8*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0088.590] CloseHandle (hObject=0x228) returned 1 [0088.593] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\ENYBENY.TXT", lpFilePart=0x0) returned 0x28 [0088.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.593] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\ENYBENY.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.608] GetFileType (hFile=0x228) returned 0x1 [0088.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.609] GetFileType (hFile=0x228) returned 0x1 [0088.609] WriteFile (in: hFile=0x228, lpBuffer=0x2625260*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2625260*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0088.610] CloseHandle (hObject=0x228) returned 1 [0088.611] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0088.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.611] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\ENYBENY.png" (normalized: "c:\\programdata\\adobe\\acrobat\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.611] GetFileType (hFile=0x228) returned 0x1 [0088.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0088.611] GetFileType (hFile=0x228) returned 0x1 [0088.611] WriteFile (in: hFile=0x228, lpBuffer=0x26262e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26262e8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0088.612] CloseHandle (hObject=0x228) returned 1 [0088.613] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x53 [0088.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.613] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\adobe\\acrobat\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.613] GetFileType (hFile=0x228) returned 0x1 [0088.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.613] GetFileType (hFile=0x228) returned 0x1 [0088.614] WriteFile (in: hFile=0x228, lpBuffer=0x262ce90*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x262ce90*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0088.615] CloseHandle (hObject=0x228) returned 1 [0088.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.615] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0088.615] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x19 [0088.615] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.615] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.616] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.616] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.616] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.616] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0088.616] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x19 [0088.616] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.617] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.617] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.617] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.617] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.617] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0088.617] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x27 [0088.617] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.632] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.633] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.634] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0088.634] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x27 [0088.634] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.635] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.635] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.635] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.635] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.636] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.636] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.637] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x32 [0088.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.637] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.TXT" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.638] GetFileType (hFile=0x228) returned 0x1 [0088.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.638] GetFileType (hFile=0x228) returned 0x1 [0088.638] WriteFile (in: hFile=0x228, lpBuffer=0x263b548*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x263b548*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0088.640] CloseHandle (hObject=0x228) returned 1 [0088.640] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png", lpFilePart=0x0) returned 0x32 [0088.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.640] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.641] GetFileType (hFile=0x228) returned 0x1 [0088.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0088.641] GetFileType (hFile=0x228) returned 0x1 [0088.641] WriteFile (in: hFile=0x228, lpBuffer=0x263c5e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x263c5e0*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0088.643] CloseHandle (hObject=0x228) returned 1 [0088.643] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5d [0088.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.643] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.644] GetFileType (hFile=0x228) returned 0x1 [0088.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.644] GetFileType (hFile=0x228) returned 0x1 [0088.644] WriteFile (in: hFile=0x228, lpBuffer=0x26431c8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26431c8*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0088.645] CloseHandle (hObject=0x228) returned 1 [0088.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\ENYBENY.TXT", lpFilePart=0x0) returned 0x24 [0088.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.645] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\ENYBENY.TXT" (normalized: "c:\\programdata\\adobe\\arm\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.646] GetFileType (hFile=0x228) returned 0x1 [0088.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.646] GetFileType (hFile=0x228) returned 0x1 [0088.646] WriteFile (in: hFile=0x228, lpBuffer=0x264d570*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x264d570*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0088.650] CloseHandle (hObject=0x228) returned 1 [0088.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\ENYBENY.png", lpFilePart=0x0) returned 0x24 [0088.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.651] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\ENYBENY.png" (normalized: "c:\\programdata\\adobe\\arm\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.651] GetFileType (hFile=0x228) returned 0x1 [0088.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0088.651] GetFileType (hFile=0x228) returned 0x1 [0088.651] WriteFile (in: hFile=0x228, lpBuffer=0x264e5f0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x264e5f0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0088.653] CloseHandle (hObject=0x228) returned 1 [0088.653] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4f [0088.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.653] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\adobe\\arm\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.671] GetFileType (hFile=0x228) returned 0x1 [0088.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.672] GetFileType (hFile=0x228) returned 0x1 [0088.672] WriteFile (in: hFile=0x228, lpBuffer=0x2655180*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2655180*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0088.673] CloseHandle (hObject=0x228) returned 1 [0088.673] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ENYBENY.TXT", lpFilePart=0x0) returned 0x20 [0088.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.673] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ENYBENY.TXT" (normalized: "c:\\programdata\\adobe\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.674] GetFileType (hFile=0x228) returned 0x1 [0088.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.674] GetFileType (hFile=0x228) returned 0x1 [0088.674] WriteFile (in: hFile=0x228, lpBuffer=0x265f518*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x265f518*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0088.675] CloseHandle (hObject=0x228) returned 1 [0088.675] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ENYBENY.png", lpFilePart=0x0) returned 0x20 [0088.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.676] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ENYBENY.png" (normalized: "c:\\programdata\\adobe\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.676] GetFileType (hFile=0x228) returned 0x1 [0088.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0088.676] GetFileType (hFile=0x228) returned 0x1 [0088.676] WriteFile (in: hFile=0x228, lpBuffer=0x2660590*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x2660590*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0088.677] CloseHandle (hObject=0x228) returned 1 [0088.678] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4b [0088.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.678] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\adobe\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.690] GetFileType (hFile=0x228) returned 0x1 [0088.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.690] GetFileType (hFile=0x228) returned 0x1 [0088.690] WriteFile (in: hFile=0x228, lpBuffer=0x2667108*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2667108*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0088.691] CloseHandle (hObject=0x228) returned 1 [0088.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data", lpFilePart=0x0) returned 0x1f [0088.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\", lpFilePart=0x0) returned 0x20 [0088.692] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0xffffffffffffffff [0088.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add60) returned 1 [0088.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2b [0088.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.697] CreateFileW (lpFileName="C:\\ProgramData\\Application Data\\ENYBENY.TXT" (normalized: "c:\\programdata\\application data\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.698] GetFileType (hFile=0x228) returned 0x1 [0088.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.698] GetFileType (hFile=0x228) returned 0x1 [0088.699] WriteFile (in: hFile=0x228, lpBuffer=0x2672930*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2672930*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0088.700] CloseHandle (hObject=0x228) returned 1 [0088.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\ENYBENY.png", lpFilePart=0x0) returned 0x2b [0088.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.700] CreateFileW (lpFileName="C:\\ProgramData\\Application Data\\ENYBENY.png" (normalized: "c:\\programdata\\application data\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.701] GetFileType (hFile=0x228) returned 0x1 [0088.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0088.701] GetFileType (hFile=0x228) returned 0x1 [0088.701] WriteFile (in: hFile=0x228, lpBuffer=0x26739b8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26739b8*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0088.703] CloseHandle (hObject=0x228) returned 1 [0088.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x56 [0088.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.703] CreateFileW (lpFileName="C:\\ProgramData\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\application data\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.704] GetFileType (hFile=0x228) returned 0x1 [0088.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.704] GetFileType (hFile=0x228) returned 0x1 [0088.704] WriteFile (in: hFile=0x228, lpBuffer=0x267a570*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x267a570*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0088.705] CloseHandle (hObject=0x228) returned 1 [0088.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.705] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop", lpFilePart=0x0) returned 0x16 [0088.705] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\", lpFilePart=0x0) returned 0x17 [0088.705] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0xffffffffffffffff [0088.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add60) returned 1 [0088.710] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\ENYBENY.TXT", lpFilePart=0x0) returned 0x22 [0088.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.710] CreateFileW (lpFileName="C:\\ProgramData\\Desktop\\ENYBENY.TXT" (normalized: "c:\\programdata\\desktop\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.712] GetFileType (hFile=0x228) returned 0x1 [0088.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.712] GetFileType (hFile=0x228) returned 0x1 [0088.712] WriteFile (in: hFile=0x228, lpBuffer=0x2685af0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2685af0*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0088.713] CloseHandle (hObject=0x228) returned 1 [0088.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\ENYBENY.png", lpFilePart=0x0) returned 0x22 [0088.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.714] CreateFileW (lpFileName="C:\\ProgramData\\Desktop\\ENYBENY.png" (normalized: "c:\\programdata\\desktop\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.716] GetFileType (hFile=0x228) returned 0x1 [0088.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0088.716] GetFileType (hFile=0x228) returned 0x1 [0088.716] WriteFile (in: hFile=0x228, lpBuffer=0x2686b68*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x2686b68*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0088.717] CloseHandle (hObject=0x228) returned 1 [0088.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4d [0088.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.718] CreateFileW (lpFileName="C:\\ProgramData\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\desktop\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.719] GetFileType (hFile=0x228) returned 0x1 [0088.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.719] GetFileType (hFile=0x228) returned 0x1 [0088.719] WriteFile (in: hFile=0x228, lpBuffer=0x268d6f0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x268d6f0*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0088.720] CloseHandle (hObject=0x228) returned 1 [0088.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents", lpFilePart=0x0) returned 0x18 [0088.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\", lpFilePart=0x0) returned 0x19 [0088.721] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0xffffffffffffffff [0088.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add60) returned 1 [0088.726] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\ENYBENY.TXT", lpFilePart=0x0) returned 0x24 [0088.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.726] CreateFileW (lpFileName="C:\\ProgramData\\Documents\\ENYBENY.TXT" (normalized: "c:\\programdata\\documents\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.727] GetFileType (hFile=0x228) returned 0x1 [0088.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.727] GetFileType (hFile=0x228) returned 0x1 [0088.727] WriteFile (in: hFile=0x228, lpBuffer=0x2698ca8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2698ca8*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0088.729] CloseHandle (hObject=0x228) returned 1 [0088.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\ENYBENY.png", lpFilePart=0x0) returned 0x24 [0088.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.729] CreateFileW (lpFileName="C:\\ProgramData\\Documents\\ENYBENY.png" (normalized: "c:\\programdata\\documents\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.729] GetFileType (hFile=0x228) returned 0x1 [0088.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0088.730] GetFileType (hFile=0x228) returned 0x1 [0088.730] WriteFile (in: hFile=0x228, lpBuffer=0x2699d28*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x2699d28*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0088.731] CloseHandle (hObject=0x228) returned 1 [0088.732] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4f [0088.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.732] CreateFileW (lpFileName="C:\\ProgramData\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\documents\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.735] GetFileType (hFile=0x228) returned 0x1 [0088.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.736] GetFileType (hFile=0x228) returned 0x1 [0088.736] WriteFile (in: hFile=0x228, lpBuffer=0x26a08b8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26a08b8*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0088.737] CloseHandle (hObject=0x228) returned 1 [0088.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites", lpFilePart=0x0) returned 0x18 [0088.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\", lpFilePart=0x0) returned 0x19 [0088.737] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0xffffffffffffffff [0088.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add60) returned 1 [0088.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\ENYBENY.TXT", lpFilePart=0x0) returned 0x24 [0088.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.742] CreateFileW (lpFileName="C:\\ProgramData\\Favorites\\ENYBENY.TXT" (normalized: "c:\\programdata\\favorites\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.743] GetFileType (hFile=0x228) returned 0x1 [0088.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.743] GetFileType (hFile=0x228) returned 0x1 [0088.744] WriteFile (in: hFile=0x228, lpBuffer=0x26abe70*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26abe70*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0088.745] CloseHandle (hObject=0x228) returned 1 [0088.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\ENYBENY.png", lpFilePart=0x0) returned 0x24 [0088.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.745] CreateFileW (lpFileName="C:\\ProgramData\\Favorites\\ENYBENY.png" (normalized: "c:\\programdata\\favorites\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.746] GetFileType (hFile=0x228) returned 0x1 [0088.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0088.746] GetFileType (hFile=0x228) returned 0x1 [0088.746] WriteFile (in: hFile=0x228, lpBuffer=0x26acef0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26acef0*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0088.747] CloseHandle (hObject=0x228) returned 1 [0088.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4f [0088.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0088.748] CreateFileW (lpFileName="C:\\ProgramData\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\favorites\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.749] GetFileType (hFile=0x228) returned 0x1 [0088.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0088.749] GetFileType (hFile=0x228) returned 0x1 [0088.749] WriteFile (in: hFile=0x228, lpBuffer=0x26b3a80*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26b3a80*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0088.750] CloseHandle (hObject=0x228) returned 1 [0088.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0088.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\", lpFilePart=0x0) returned 0x19 [0088.751] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0088.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0088.755] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0088.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0088.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0088.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0088.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\", lpFilePart=0x0) returned 0x19 [0088.756] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0088.756] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0088.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0088.760] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0088.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0088.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x23 [0088.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x24 [0088.760] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.760] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.761] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.761] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.761] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.761] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x23 [0088.761] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x24 [0088.761] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.762] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.762] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.762] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.762] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.762] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2a [0088.762] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2b [0088.762] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.763] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.763] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.763] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.763] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2a [0088.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2b [0088.763] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.764] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.764] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.765] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.765] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x2e [0088.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x2f [0088.765] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.765] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.766] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.766] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.766] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x2e [0088.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x2f [0088.766] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.766] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.767] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.767] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.767] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.767] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x34 [0088.767] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x35 [0088.767] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0088.770] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.770] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.770] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.770] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.771] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.771] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.771] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.771] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.771] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0088.771] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0088.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0088.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.772] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x34 [0088.772] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x35 [0088.772] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0088.773] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.774] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.774] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.774] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.774] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.774] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.774] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.774] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0088.774] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0088.775] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0088.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0088.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x40 [0088.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0088.776] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.778] GetFileType (hFile=0x228) returned 0x1 [0088.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0088.778] GetFileType (hFile=0x228) returned 0x1 [0088.779] WriteFile (in: hFile=0x228, lpBuffer=0x26cd3b0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26cd3b0*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0088.780] CloseHandle (hObject=0x228) returned 1 [0088.780] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png", lpFilePart=0x0) returned 0x40 [0088.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0088.780] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.781] GetFileType (hFile=0x228) returned 0x1 [0088.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0088.781] GetFileType (hFile=0x228) returned 0x1 [0088.781] WriteFile (in: hFile=0x228, lpBuffer=0x26ce468*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26ce468*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0088.782] CloseHandle (hObject=0x228) returned 1 [0088.783] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6b [0088.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0088.783] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.783] GetFileType (hFile=0x228) returned 0x1 [0088.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0088.783] GetFileType (hFile=0x228) returned 0x1 [0088.783] WriteFile (in: hFile=0x228, lpBuffer=0x26d50a0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26d50a0*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0088.784] CloseHandle (hObject=0x228) returned 1 [0088.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3a [0088.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.785] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.785] GetFileType (hFile=0x228) returned 0x1 [0088.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.785] GetFileType (hFile=0x228) returned 0x1 [0088.786] WriteFile (in: hFile=0x228, lpBuffer=0x26df498*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26df498*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0088.787] CloseHandle (hObject=0x228) returned 1 [0088.787] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png", lpFilePart=0x0) returned 0x3a [0088.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0088.787] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.791] GetFileType (hFile=0x228) returned 0x1 [0088.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0088.791] GetFileType (hFile=0x228) returned 0x1 [0088.791] WriteFile (in: hFile=0x228, lpBuffer=0x26e0540*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x26e0540*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0088.792] CloseHandle (hObject=0x228) returned 1 [0088.793] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x65 [0088.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.793] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.793] GetFileType (hFile=0x228) returned 0x1 [0088.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.793] GetFileType (hFile=0x228) returned 0x1 [0088.793] WriteFile (in: hFile=0x228, lpBuffer=0x26e7158*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26e7158*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0088.794] CloseHandle (hObject=0x228) returned 1 [0088.794] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\ENYBENY.TXT", lpFilePart=0x0) returned 0x36 [0088.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.794] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.795] GetFileType (hFile=0x228) returned 0x1 [0088.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.795] GetFileType (hFile=0x228) returned 0x1 [0088.795] WriteFile (in: hFile=0x228, lpBuffer=0x26f1540*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26f1540*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0088.796] CloseHandle (hObject=0x228) returned 1 [0088.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\ENYBENY.png", lpFilePart=0x0) returned 0x36 [0088.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.796] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.796] GetFileType (hFile=0x228) returned 0x1 [0088.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0088.797] GetFileType (hFile=0x228) returned 0x1 [0088.797] WriteFile (in: hFile=0x228, lpBuffer=0x26f25e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26f25e0*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0088.798] CloseHandle (hObject=0x228) returned 1 [0088.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x61 [0088.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.799] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.799] GetFileType (hFile=0x228) returned 0x1 [0088.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.799] GetFileType (hFile=0x228) returned 0x1 [0088.799] WriteFile (in: hFile=0x228, lpBuffer=0x26f91e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26f91e0*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0088.800] CloseHandle (hObject=0x228) returned 1 [0088.800] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0088.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.800] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\assistance\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.801] GetFileType (hFile=0x228) returned 0x1 [0088.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.801] GetFileType (hFile=0x228) returned 0x1 [0088.801] WriteFile (in: hFile=0x228, lpBuffer=0x27035a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27035a8*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0088.802] CloseHandle (hObject=0x228) returned 1 [0088.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0088.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.803] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\assistance\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.804] GetFileType (hFile=0x228) returned 0x1 [0088.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0088.804] GetFileType (hFile=0x228) returned 0x1 [0088.804] WriteFile (in: hFile=0x228, lpBuffer=0x2704638*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2704638*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0088.805] CloseHandle (hObject=0x228) returned 1 [0088.806] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0088.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.806] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\assistance\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.819] GetFileType (hFile=0x228) returned 0x1 [0088.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.819] GetFileType (hFile=0x228) returned 0x1 [0088.819] WriteFile (in: hFile=0x228, lpBuffer=0x270b208*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x270b208*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0088.820] CloseHandle (hObject=0x228) returned 1 [0088.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.821] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0088.821] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x20 [0088.821] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.822] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.822] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0088.822] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x20 [0088.822] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.822] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.822] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.822] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.822] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.822] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.822] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0088.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x24 [0088.823] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.823] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.823] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.823] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.823] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0088.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x24 [0088.823] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.823] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.824] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0088.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0088.824] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.824] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0088.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0088.825] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.825] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.825] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.825] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3b [0088.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.825] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.829] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\ENYBENY.png", lpFilePart=0x0) returned 0x3b [0088.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0088.829] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0088.831] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x66 [0088.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.831] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.832] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0088.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.833] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.834] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0088.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.834] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0088.836] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0088.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.836] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.850] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0088.850] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x25 [0088.850] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.851] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.851] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.851] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0088.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x25 [0088.852] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.852] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\ENYBENY.TXT", lpFilePart=0x0) returned 0x30 [0088.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.852] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.855] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\ENYBENY.png", lpFilePart=0x0) returned 0x30 [0088.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.855] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0088.858] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5b [0088.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.858] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.860] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0088.860] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x24 [0088.861] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.861] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.861] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0088.861] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x24 [0088.861] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.862] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0088.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0088.862] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.862] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.863] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0088.863] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0088.863] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.863] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.863] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3b [0088.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.863] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.866] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\ENYBENY.png", lpFilePart=0x0) returned 0x3b [0088.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0088.866] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0088.868] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x66 [0088.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.868] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x2c [0088.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x2d [0088.870] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.872] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x2c [0088.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x2d [0088.872] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.872] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.873] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\ENYBENY.TXT", lpFilePart=0x0) returned 0x38 [0088.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.873] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.877] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\ENYBENY.png", lpFilePart=0x0) returned 0x38 [0088.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0088.877] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0088.879] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x63 [0088.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0088.879] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0088.881] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0088.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.881] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.883] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0088.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0088.884] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0088.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0088.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0088.886] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0088.890] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2b [0088.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.890] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.893] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\ENYBENY.png", lpFilePart=0x0) returned 0x2b [0088.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.893] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\crypto\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0088.895] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x56 [0088.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0088.895] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\crypto\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x228 [0088.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0088.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.899] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0088.899] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x26 [0088.899] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.899] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.900] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0088.900] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0088.900] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x26 [0088.900] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0088.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0088.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0088.900] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0088.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0088.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.901] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0088.901] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x2d [0088.901] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.902] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.902] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.902] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.902] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.902] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0088.902] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0088.902] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x2d [0088.902] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0088.902] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0088.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0088.903] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0088.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0088.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.903] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0088.903] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x54 [0088.903] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.916] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.916] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0088.918] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0088.918] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x54 [0088.918] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0088.919] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0088.919] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0088.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0088.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0088.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.EnyBenied", lpFilePart=0x0) returned 0x6c [0088.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0088.922] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.EnyBenied" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0088.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0089.574] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0089.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0089.574] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1aa490) returned 1 [0089.602] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5f [0089.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0089.602] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x158 [0089.603] GetFileType (hFile=0x158) returned 0x1 [0089.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0089.603] GetFileType (hFile=0x158) returned 0x1 [0089.603] WriteFile (in: hFile=0x158, lpBuffer=0x26d1880*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26d1880*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0089.604] CloseHandle (hObject=0x158) returned 1 [0089.604] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ENYBENY.png", lpFilePart=0x0) returned 0x5f [0089.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0089.605] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0089.605] GetFileType (hFile=0x158) returned 0x1 [0089.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0089.605] GetFileType (hFile=0x158) returned 0x1 [0089.605] WriteFile (in: hFile=0x158, lpBuffer=0x26d2970*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x26d2970*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0089.606] CloseHandle (hObject=0x158) returned 1 [0089.606] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8a [0089.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0089.607] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x158 [0089.607] GetFileType (hFile=0x158) returned 0x1 [0089.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0089.607] GetFileType (hFile=0x158) returned 0x1 [0089.607] WriteFile (in: hFile=0x158, lpBuffer=0x26d9660*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26d9660*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0089.608] CloseHandle (hObject=0x158) returned 1 [0089.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0089.608] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0089.609] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x54 [0089.609] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0089.609] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0089.609] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0089.609] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0089.609] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0089.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0089.610] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0089.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0089.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0089.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0089.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0089.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x54 [0089.610] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0089.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0089.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0089.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0089.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0089.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0089.611] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0089.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0089.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0089.612] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.EnyBenied", lpFilePart=0x0) returned 0x6c [0089.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0089.612] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.EnyBenied" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x158 [0089.613] GetFileType (hFile=0x158) returned 0x1 [0089.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0089.614] GetFileType (hFile=0x158) returned 0x1 [0090.220] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0090.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0090.220] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1aa490) returned 1 [0090.231] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5f [0090.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0090.231] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x240 [0090.232] GetFileType (hFile=0x240) returned 0x1 [0090.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0090.232] GetFileType (hFile=0x240) returned 0x1 [0090.232] WriteFile (in: hFile=0x240, lpBuffer=0x262e060*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x262e060*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0090.233] CloseHandle (hObject=0x240) returned 1 [0090.234] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ENYBENY.png", lpFilePart=0x0) returned 0x5f [0090.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0090.234] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0090.234] GetFileType (hFile=0x240) returned 0x1 [0090.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0090.234] GetFileType (hFile=0x240) returned 0x1 [0090.234] WriteFile (in: hFile=0x240, lpBuffer=0x262f150*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x262f150*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0090.235] CloseHandle (hObject=0x240) returned 1 [0090.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8a [0090.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0090.236] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x240 [0090.236] GetFileType (hFile=0x240) returned 0x1 [0090.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0090.236] GetFileType (hFile=0x240) returned 0x1 [0090.236] WriteFile (in: hFile=0x240, lpBuffer=0x2635e40*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x2635e40*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0090.237] CloseHandle (hObject=0x240) returned 1 [0090.240] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\ENYBENY.TXT", lpFilePart=0x0) returned 0x38 [0090.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0090.240] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x240 [0090.240] GetFileType (hFile=0x240) returned 0x1 [0090.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0090.240] GetFileType (hFile=0x240) returned 0x1 [0090.241] WriteFile (in: hFile=0x240, lpBuffer=0x2640238*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2640238*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0090.242] CloseHandle (hObject=0x240) returned 1 [0090.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\ENYBENY.png", lpFilePart=0x0) returned 0x38 [0090.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0090.242] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0090.255] GetFileType (hFile=0x240) returned 0x1 [0090.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0090.256] GetFileType (hFile=0x240) returned 0x1 [0090.256] WriteFile (in: hFile=0x240, lpBuffer=0x26412e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26412e0*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0090.257] CloseHandle (hObject=0x240) returned 1 [0090.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x63 [0090.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0090.257] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x240 [0090.258] GetFileType (hFile=0x240) returned 0x1 [0090.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0090.258] GetFileType (hFile=0x240) returned 0x1 [0090.258] WriteFile (in: hFile=0x240, lpBuffer=0x2647ee8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2647ee8*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0090.259] CloseHandle (hObject=0x240) returned 1 [0090.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0090.259] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0090.259] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2b [0090.260] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0090.260] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0090.260] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0090.260] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0090.260] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0090.260] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0090.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0090.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0090.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0090.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0090.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2b [0090.261] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0090.261] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0090.261] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0090.262] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0090.262] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0090.262] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0090.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0090.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0090.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0090.262] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0090.262] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x52 [0090.263] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0090.265] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.265] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.266] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.267] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0090.267] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0090.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0090.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0090.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0090.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0090.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x52 [0090.268] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0090.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.271] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0090.271] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0090.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0090.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0090.273] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.EnyBenied", lpFilePart=0x0) returned 0x68 [0090.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0090.273] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.EnyBenied" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0090.274] GetFileType (hFile=0x240) returned 0x1 [0090.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0090.274] GetFileType (hFile=0x240) returned 0x1 [0090.828] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0090.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0090.828] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1aa490) returned 1 [0090.834] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5d [0090.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0090.834] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x244 [0090.834] GetFileType (hFile=0x244) returned 0x1 [0090.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0090.834] GetFileType (hFile=0x244) returned 0x1 [0090.835] WriteFile (in: hFile=0x244, lpBuffer=0x27a1258*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x27a1258*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0090.836] CloseHandle (hObject=0x244) returned 1 [0090.836] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ENYBENY.png", lpFilePart=0x0) returned 0x5d [0090.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0090.836] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x244 [0090.836] GetFileType (hFile=0x244) returned 0x1 [0090.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0090.837] GetFileType (hFile=0x244) returned 0x1 [0090.837] WriteFile (in: hFile=0x244, lpBuffer=0x27a2348*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x27a2348*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0090.838] CloseHandle (hObject=0x244) returned 1 [0090.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x88 [0090.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0090.838] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x244 [0090.839] GetFileType (hFile=0x244) returned 0x1 [0090.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0090.839] GetFileType (hFile=0x244) returned 0x1 [0090.839] WriteFile (in: hFile=0x244, lpBuffer=0x27a9038*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x27a9038*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0090.840] CloseHandle (hObject=0x244) returned 1 [0090.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0090.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0090.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x52 [0090.840] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0090.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0090.843] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0090.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0090.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0090.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0090.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0090.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x52 [0090.844] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0090.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0090.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0090.846] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0090.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0090.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0090.848] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.EnyBenied", lpFilePart=0x0) returned 0x65 [0090.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0090.848] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.EnyBenied" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x244 [0090.849] GetFileType (hFile=0x244) returned 0x1 [0090.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0090.849] GetFileType (hFile=0x244) returned 0x1 [0091.392] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0091.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0091.392] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1aa490) returned 1 [0091.398] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5d [0091.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0091.398] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.398] GetFileType (hFile=0x248) returned 0x1 [0091.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0091.399] GetFileType (hFile=0x248) returned 0x1 [0091.399] WriteFile (in: hFile=0x248, lpBuffer=0x26ff8c8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26ff8c8*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0091.400] CloseHandle (hObject=0x248) returned 1 [0091.400] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ENYBENY.png", lpFilePart=0x0) returned 0x5d [0091.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0091.401] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.401] GetFileType (hFile=0x248) returned 0x1 [0091.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0091.401] GetFileType (hFile=0x248) returned 0x1 [0091.401] WriteFile (in: hFile=0x248, lpBuffer=0x27009b8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x27009b8*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.402] CloseHandle (hObject=0x248) returned 1 [0091.403] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x88 [0091.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0091.403] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.403] GetFileType (hFile=0x248) returned 0x1 [0091.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0091.403] GetFileType (hFile=0x248) returned 0x1 [0091.403] WriteFile (in: hFile=0x248, lpBuffer=0x27076a8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x27076a8*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0091.404] CloseHandle (hObject=0x248) returned 1 [0091.407] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\ENYBENY.TXT", lpFilePart=0x0) returned 0x36 [0091.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.407] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.407] GetFileType (hFile=0x248) returned 0x1 [0091.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.407] GetFileType (hFile=0x248) returned 0x1 [0091.408] WriteFile (in: hFile=0x248, lpBuffer=0x2711a90*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2711a90*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0091.409] CloseHandle (hObject=0x248) returned 1 [0091.409] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\ENYBENY.png", lpFilePart=0x0) returned 0x36 [0091.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0091.409] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.411] GetFileType (hFile=0x248) returned 0x1 [0091.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0091.411] GetFileType (hFile=0x248) returned 0x1 [0091.411] WriteFile (in: hFile=0x248, lpBuffer=0x2712b30*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x2712b30*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0091.412] CloseHandle (hObject=0x248) returned 1 [0091.413] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x61 [0091.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.413] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.413] GetFileType (hFile=0x248) returned 0x1 [0091.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.413] GetFileType (hFile=0x248) returned 0x1 [0091.413] WriteFile (in: hFile=0x248, lpBuffer=0x2719730*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2719730*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0091.414] CloseHandle (hObject=0x248) returned 1 [0091.415] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0091.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.415] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.415] GetFileType (hFile=0x248) returned 0x1 [0091.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.415] GetFileType (hFile=0x248) returned 0x1 [0091.416] WriteFile (in: hFile=0x248, lpBuffer=0x2723b08*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2723b08*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0091.417] CloseHandle (hObject=0x248) returned 1 [0091.417] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0091.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.417] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\device stage\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.417] GetFileType (hFile=0x248) returned 0x1 [0091.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.417] GetFileType (hFile=0x248) returned 0x1 [0091.417] WriteFile (in: hFile=0x248, lpBuffer=0x2724ba0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2724ba0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.419] CloseHandle (hObject=0x248) returned 1 [0091.419] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0091.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.419] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\device stage\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.421] GetFileType (hFile=0x248) returned 0x1 [0091.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.421] GetFileType (hFile=0x248) returned 0x1 [0091.421] WriteFile (in: hFile=0x248, lpBuffer=0x272b788*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x272b788*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0091.422] CloseHandle (hObject=0x248) returned 1 [0091.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.423] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0091.423] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x24 [0091.423] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.424] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.424] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.425] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.425] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0091.425] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x24 [0091.425] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.425] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.425] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.426] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.426] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0091.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.426] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\devicesync\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.426] GetFileType (hFile=0x248) returned 0x1 [0091.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.427] GetFileType (hFile=0x248) returned 0x1 [0091.427] WriteFile (in: hFile=0x248, lpBuffer=0x2737550*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2737550*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0091.428] CloseHandle (hObject=0x248) returned 1 [0091.429] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0091.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.429] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\devicesync\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.429] GetFileType (hFile=0x248) returned 0x1 [0091.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.429] GetFileType (hFile=0x248) returned 0x1 [0091.429] WriteFile (in: hFile=0x248, lpBuffer=0x27385e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x27385e0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.430] CloseHandle (hObject=0x248) returned 1 [0091.431] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0091.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.431] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\devicesync\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.432] GetFileType (hFile=0x248) returned 0x1 [0091.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.432] GetFileType (hFile=0x248) returned 0x1 [0091.432] WriteFile (in: hFile=0x248, lpBuffer=0x273f1b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x273f1b0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0091.433] CloseHandle (hObject=0x248) returned 1 [0091.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.433] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0091.433] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x1d [0091.433] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.434] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0091.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x1d [0091.435] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.435] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.435] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0091.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x24 [0091.436] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.436] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.436] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.436] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.437] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0091.437] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x24 [0091.437] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.437] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.437] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.437] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.438] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0091.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.438] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\drm\\server\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.438] GetFileType (hFile=0x248) returned 0x1 [0091.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.438] GetFileType (hFile=0x248) returned 0x1 [0091.439] WriteFile (in: hFile=0x248, lpBuffer=0x274ca90*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x274ca90*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0091.440] CloseHandle (hObject=0x248) returned 1 [0091.440] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0091.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0091.440] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\drm\\server\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.440] GetFileType (hFile=0x248) returned 0x1 [0091.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0091.440] GetFileType (hFile=0x248) returned 0x1 [0091.440] WriteFile (in: hFile=0x248, lpBuffer=0x274db20*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x274db20*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0091.442] CloseHandle (hObject=0x248) returned 1 [0091.442] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0091.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.442] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\drm\\server\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.443] GetFileType (hFile=0x248) returned 0x1 [0091.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.443] GetFileType (hFile=0x248) returned 0x1 [0091.443] WriteFile (in: hFile=0x248, lpBuffer=0x27546f0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x27546f0*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0091.444] CloseHandle (hObject=0x248) returned 1 [0091.444] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\ENYBENY.TXT", lpFilePart=0x0) returned 0x28 [0091.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.444] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\drm\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.444] GetFileType (hFile=0x248) returned 0x1 [0091.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.445] GetFileType (hFile=0x248) returned 0x1 [0091.445] WriteFile (in: hFile=0x248, lpBuffer=0x275eaa8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x275eaa8*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0091.446] CloseHandle (hObject=0x248) returned 1 [0091.446] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0091.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.446] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\drm\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.447] GetFileType (hFile=0x248) returned 0x1 [0091.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.447] GetFileType (hFile=0x248) returned 0x1 [0091.447] WriteFile (in: hFile=0x248, lpBuffer=0x275fb30*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x275fb30*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.448] CloseHandle (hObject=0x248) returned 1 [0091.449] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x53 [0091.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.449] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\drm\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.449] GetFileType (hFile=0x248) returned 0x1 [0091.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.449] GetFileType (hFile=0x248) returned 0x1 [0091.450] WriteFile (in: hFile=0x248, lpBuffer=0x27666d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27666d8*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0091.451] CloseHandle (hObject=0x248) returned 1 [0091.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.451] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome", lpFilePart=0x0) returned 0x1e [0091.451] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x1f [0091.451] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.452] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.452] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.452] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.452] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome", lpFilePart=0x0) returned 0x1e [0091.452] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x1f [0091.452] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.452] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.453] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.453] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.453] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.453] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x23 [0091.453] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x24 [0091.453] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.454] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.454] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x23 [0091.454] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x24 [0091.454] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.455] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.455] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.455] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.455] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0091.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.455] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.456] GetFileType (hFile=0x248) returned 0x1 [0091.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.456] GetFileType (hFile=0x248) returned 0x1 [0091.456] WriteFile (in: hFile=0x248, lpBuffer=0x2774048*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2774048*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0091.457] CloseHandle (hObject=0x248) returned 1 [0091.458] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0091.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0091.458] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.458] GetFileType (hFile=0x248) returned 0x1 [0091.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0091.458] GetFileType (hFile=0x248) returned 0x1 [0091.458] WriteFile (in: hFile=0x248, lpBuffer=0x27750d8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x27750d8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0091.459] CloseHandle (hObject=0x248) returned 1 [0091.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0091.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.463] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.463] GetFileType (hFile=0x248) returned 0x1 [0091.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.463] GetFileType (hFile=0x248) returned 0x1 [0091.463] WriteFile (in: hFile=0x248, lpBuffer=0x277bca8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x277bca8*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0091.464] CloseHandle (hObject=0x248) returned 1 [0091.465] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2a [0091.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.465] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\ehome\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.465] GetFileType (hFile=0x248) returned 0x1 [0091.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.465] GetFileType (hFile=0x248) returned 0x1 [0091.466] WriteFile (in: hFile=0x248, lpBuffer=0x2786060*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2786060*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0091.467] CloseHandle (hObject=0x248) returned 1 [0091.467] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\ENYBENY.png", lpFilePart=0x0) returned 0x2a [0091.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.467] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\ehome\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.467] GetFileType (hFile=0x248) returned 0x1 [0091.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.467] GetFileType (hFile=0x248) returned 0x1 [0091.467] WriteFile (in: hFile=0x248, lpBuffer=0x27870e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x27870e8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.469] CloseHandle (hObject=0x248) returned 1 [0091.469] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x55 [0091.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.469] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\ehome\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.469] GetFileType (hFile=0x248) returned 0x1 [0091.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.469] GetFileType (hFile=0x248) returned 0x1 [0091.470] WriteFile (in: hFile=0x248, lpBuffer=0x278dca0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x278dca0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0091.471] CloseHandle (hObject=0x248) returned 1 [0091.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.471] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x25 [0091.471] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x26 [0091.471] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.472] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.472] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.472] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.472] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.473] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x25 [0091.473] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x26 [0091.473] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.473] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.473] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.473] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.473] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.474] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2b [0091.474] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x2c [0091.474] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.475] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.475] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.475] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.475] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.475] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2b [0091.475] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x2c [0091.476] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.476] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.476] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.476] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.476] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.476] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x44 [0091.477] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x45 [0091.477] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.477] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.477] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0091.477] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0091.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0091.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.478] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x44 [0091.478] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x45 [0091.478] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.478] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.478] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0091.478] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0091.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0091.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\ENYBENY.TXT", lpFilePart=0x0) returned 0x50 [0091.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0091.479] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0091.482] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\ENYBENY.png", lpFilePart=0x0) returned 0x50 [0091.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0091.482] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0091.484] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7b [0091.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0091.484] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0091.485] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ENYBENY.TXT", lpFilePart=0x0) returned 0x37 [0091.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.485] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.487] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ENYBENY.png", lpFilePart=0x0) returned 0x37 [0091.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0091.487] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0091.488] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x62 [0091.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.488] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.491] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0091.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.491] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\event viewer\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.493] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0091.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.493] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\event viewer\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.495] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0091.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.495] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\event viewer\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.498] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0091.498] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x25 [0091.498] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.498] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.499] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.499] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0091.499] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x25 [0091.499] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.499] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.500] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.500] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\ENYBENY.TXT", lpFilePart=0x0) returned 0x30 [0091.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.500] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\identitycrl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.502] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\ENYBENY.png", lpFilePart=0x0) returned 0x30 [0091.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.502] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\identitycrl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.503] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5b [0091.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.503] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\identitycrl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.507] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x25 [0091.507] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x26 [0091.507] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.507] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.507] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.507] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.508] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x25 [0091.508] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x26 [0091.508] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.508] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.508] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.508] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.509] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0091.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.509] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\media player\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0091.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.523] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\media player\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.527] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0091.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.527] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\media player\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.535] WriteFile (in: hFile=0x248, lpBuffer=0x25f2a10*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x25f2a10*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0091.536] CloseHandle (hObject=0x248) returned 1 [0091.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.536] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0091.536] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x1c [0091.536] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.537] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.538] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0091.538] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x1c [0091.538] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.538] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.538] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.538] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.539] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.539] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.542] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\ENYBENY.TXT", lpFilePart=0x0) returned 0x27 [0091.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.542] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\mf\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.542] GetFileType (hFile=0x248) returned 0x1 [0091.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.542] GetFileType (hFile=0x248) returned 0x1 [0091.542] WriteFile (in: hFile=0x248, lpBuffer=0x25febe0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x25febe0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0091.544] CloseHandle (hObject=0x248) returned 1 [0091.544] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\ENYBENY.png", lpFilePart=0x0) returned 0x27 [0091.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.544] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\mf\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.544] GetFileType (hFile=0x248) returned 0x1 [0091.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.545] GetFileType (hFile=0x248) returned 0x1 [0091.545] WriteFile (in: hFile=0x248, lpBuffer=0x25ffc60*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x25ffc60*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.546] CloseHandle (hObject=0x248) returned 1 [0091.547] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x52 [0091.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.547] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\mf\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.585] GetFileType (hFile=0x248) returned 0x1 [0091.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.585] GetFileType (hFile=0x248) returned 0x1 [0091.586] WriteFile (in: hFile=0x248, lpBuffer=0x2606800*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2606800*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0091.587] CloseHandle (hObject=0x248) returned 1 [0091.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.590] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x1d [0091.590] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x1e [0091.591] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.598] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.598] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.599] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.599] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.599] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x1d [0091.599] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x1e [0091.599] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.600] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.600] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.600] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.600] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.601] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x21 [0091.601] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x22 [0091.601] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.602] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.603] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.603] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.604] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x21 [0091.605] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x22 [0091.605] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.606] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.606] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.607] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2d [0091.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.610] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.612] GetFileType (hFile=0x248) returned 0x1 [0091.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.612] GetFileType (hFile=0x248) returned 0x1 [0091.613] WriteFile (in: hFile=0x248, lpBuffer=0x2614058*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2614058*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0091.616] CloseHandle (hObject=0x248) returned 1 [0091.616] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\ENYBENY.png", lpFilePart=0x0) returned 0x2d [0091.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0091.617] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.618] GetFileType (hFile=0x248) returned 0x1 [0091.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0091.618] GetFileType (hFile=0x248) returned 0x1 [0091.618] WriteFile (in: hFile=0x248, lpBuffer=0x26150e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26150e8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0091.622] CloseHandle (hObject=0x248) returned 1 [0091.623] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x58 [0091.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.623] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.623] GetFileType (hFile=0x248) returned 0x1 [0091.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.624] GetFileType (hFile=0x248) returned 0x1 [0091.624] WriteFile (in: hFile=0x248, lpBuffer=0x261bcb8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x261bcb8*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0091.626] CloseHandle (hObject=0x248) returned 1 [0091.627] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\ENYBENY.TXT", lpFilePart=0x0) returned 0x29 [0091.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.627] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\msdn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.628] GetFileType (hFile=0x248) returned 0x1 [0091.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.628] GetFileType (hFile=0x248) returned 0x1 [0091.629] WriteFile (in: hFile=0x248, lpBuffer=0x2626070*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2626070*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0091.631] CloseHandle (hObject=0x248) returned 1 [0091.631] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\ENYBENY.png", lpFilePart=0x0) returned 0x29 [0091.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.632] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\msdn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.633] GetFileType (hFile=0x248) returned 0x1 [0091.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.633] GetFileType (hFile=0x248) returned 0x1 [0091.633] WriteFile (in: hFile=0x248, lpBuffer=0x26270f8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26270f8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.636] CloseHandle (hObject=0x248) returned 1 [0091.637] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x54 [0091.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.637] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\msdn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.638] GetFileType (hFile=0x248) returned 0x1 [0091.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.639] GetFileType (hFile=0x248) returned 0x1 [0091.639] WriteFile (in: hFile=0x248, lpBuffer=0x262dcb0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x262dcb0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0091.640] CloseHandle (hObject=0x248) returned 1 [0091.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.640] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0091.640] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x26 [0091.640] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.642] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.642] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.642] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.643] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.643] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0091.643] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x26 [0091.644] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.644] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.645] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.645] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.645] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.646] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0091.646] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x36 [0091.646] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.647] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.647] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.648] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.648] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0091.648] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x36 [0091.649] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.649] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.649] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.650] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\ENYBENY.TXT", lpFilePart=0x0) returned 0x41 [0091.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.652] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.667] GetFileType (hFile=0x248) returned 0x1 [0091.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.667] GetFileType (hFile=0x248) returned 0x1 [0091.667] WriteFile (in: hFile=0x248, lpBuffer=0x263bc80*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x263bc80*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0091.668] CloseHandle (hObject=0x248) returned 1 [0091.668] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\ENYBENY.png", lpFilePart=0x0) returned 0x41 [0091.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0091.668] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.669] GetFileType (hFile=0x248) returned 0x1 [0091.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0091.669] GetFileType (hFile=0x248) returned 0x1 [0091.669] WriteFile (in: hFile=0x248, lpBuffer=0x263cd38*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x263cd38*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0091.670] CloseHandle (hObject=0x248) returned 1 [0091.670] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6c [0091.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.670] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.671] GetFileType (hFile=0x248) returned 0x1 [0091.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.671] GetFileType (hFile=0x248) returned 0x1 [0091.671] WriteFile (in: hFile=0x248, lpBuffer=0x2643980*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2643980*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0091.672] CloseHandle (hObject=0x248) returned 1 [0091.672] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0091.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.672] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\netframework\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.673] GetFileType (hFile=0x248) returned 0x1 [0091.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.673] GetFileType (hFile=0x248) returned 0x1 [0091.673] WriteFile (in: hFile=0x248, lpBuffer=0x264dd58*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x264dd58*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0091.674] CloseHandle (hObject=0x248) returned 1 [0091.674] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0091.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.674] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\netframework\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.675] GetFileType (hFile=0x248) returned 0x1 [0091.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.675] GetFileType (hFile=0x248) returned 0x1 [0091.675] WriteFile (in: hFile=0x248, lpBuffer=0x264edf0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x264edf0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.676] CloseHandle (hObject=0x248) returned 1 [0091.677] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0091.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.677] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\netframework\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.687] GetFileType (hFile=0x248) returned 0x1 [0091.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.688] GetFileType (hFile=0x248) returned 0x1 [0091.688] WriteFile (in: hFile=0x248, lpBuffer=0x26559d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26559d8*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0091.689] CloseHandle (hObject=0x248) returned 1 [0091.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0091.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x21 [0091.689] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.690] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0091.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x21 [0091.691] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.691] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.691] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.691] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.691] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.691] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0091.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x2d [0091.692] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.692] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.692] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.692] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0091.693] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x2d [0091.693] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.693] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.693] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.693] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.693] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\ENYBENY.TXT", lpFilePart=0x0) returned 0x38 [0091.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.693] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\network\\connections\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.694] GetFileType (hFile=0x248) returned 0x1 [0091.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.694] GetFileType (hFile=0x248) returned 0x1 [0091.694] WriteFile (in: hFile=0x248, lpBuffer=0x26639a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26639a8*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0091.695] CloseHandle (hObject=0x248) returned 1 [0091.696] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\ENYBENY.png", lpFilePart=0x0) returned 0x38 [0091.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0091.696] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\network\\connections\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.696] GetFileType (hFile=0x248) returned 0x1 [0091.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0091.696] GetFileType (hFile=0x248) returned 0x1 [0091.697] WriteFile (in: hFile=0x248, lpBuffer=0x2664a50*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x2664a50*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0091.698] CloseHandle (hObject=0x248) returned 1 [0091.698] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x63 [0091.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.698] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\network\\connections\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.698] GetFileType (hFile=0x248) returned 0x1 [0091.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.699] GetFileType (hFile=0x248) returned 0x1 [0091.699] WriteFile (in: hFile=0x248, lpBuffer=0x266b658*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x266b658*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0091.699] CloseHandle (hObject=0x248) returned 1 [0091.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0091.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x2c [0091.700] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.700] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.700] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.700] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.700] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.701] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.701] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0091.701] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x2c [0091.701] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.701] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.701] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.701] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.701] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.701] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.702] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\ENYBENY.TXT", lpFilePart=0x0) returned 0x37 [0091.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.702] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.705] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\ENYBENY.png", lpFilePart=0x0) returned 0x37 [0091.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0091.705] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0091.707] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x62 [0091.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0091.707] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0091.735] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2c [0091.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.735] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\network\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\ENYBENY.png", lpFilePart=0x0) returned 0x2c [0091.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.737] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\network\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.738] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x57 [0091.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.738] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\network\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x1f [0091.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x20 [0091.754] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.776] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.776] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.777] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0091.778] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x1f [0091.778] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x20 [0091.779] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.781] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0091.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0091.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.782] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2a [0091.782] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2b [0091.782] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.784] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0091.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2a [0091.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2b [0091.785] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.785] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.785] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.785] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.785] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.785] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0091.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0091.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.786] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x2f [0091.786] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x30 [0091.786] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.794] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.796] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0091.798] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0091.799] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x2f [0091.799] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x30 [0091.799] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0091.801] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.802] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3b [0091.802] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.804] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENYBENY.png", lpFilePart=0x0) returned 0x3b [0091.804] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.805] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x66 [0091.805] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.807] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x2f [0091.807] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x30 [0091.807] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.813] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.815] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.816] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.816] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.816] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0091.816] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x2f [0091.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x30 [0091.817] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0091.819] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3b [0091.820] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENYBENY.png", lpFilePart=0x0) returned 0x3b [0091.823] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x66 [0091.824] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\ENYBENY.TXT", lpFilePart=0x0) returned 0x36 [0091.825] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\ENYBENY.png", lpFilePart=0x0) returned 0x36 [0091.827] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.828] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x61 [0091.828] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2b [0091.835] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\office\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.837] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\ENYBENY.png", lpFilePart=0x0) returned 0x2b [0091.837] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\office\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x56 [0091.838] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\office\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x39 [0091.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3a [0091.839] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.840] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.840] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x39 [0091.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3a [0091.840] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.840] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.841] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x3f [0091.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x40 [0091.841] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.841] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x3f [0091.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x40 [0091.842] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.842] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.842] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0091.842] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.843] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0091.843] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.845] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0091.845] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.846] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\ENYBENY.TXT", lpFilePart=0x0) returned 0x45 [0091.846] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.848] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\ENYBENY.png", lpFilePart=0x0) returned 0x45 [0091.848] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.849] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x70 [0091.849] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.851] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC", lpFilePart=0x0) returned 0x1c [0091.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x1d [0091.852] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.852] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC", lpFilePart=0x0) returned 0x1c [0091.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x1d [0091.853] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.853] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.854] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x25 [0091.854] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x26 [0091.854] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.854] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.854] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.854] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.855] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x25 [0091.855] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x26 [0091.855] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.855] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.855] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.855] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.855] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0091.855] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.857] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0091.857] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.859] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0091.859] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.860] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2a [0091.860] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2b [0091.860] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.861] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.861] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2a [0091.861] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2b [0091.861] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.862] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\ENYBENY.TXT", lpFilePart=0x0) returned 0x36 [0091.862] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.864] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\ENYBENY.png", lpFilePart=0x0) returned 0x36 [0091.864] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.866] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x61 [0091.866] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x26 [0091.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x27 [0091.870] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.870] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.871] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.871] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x26 [0091.871] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x27 [0091.871] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.872] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\ENYBENY.TXT", lpFilePart=0x0) returned 0x32 [0091.872] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\ENYBENY.png", lpFilePart=0x0) returned 0x32 [0091.874] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5d [0091.875] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.877] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x21 [0091.877] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x22 [0091.877] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.877] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.877] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.878] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.878] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x21 [0091.878] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x22 [0091.878] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.879] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0091.879] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.879] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2d [0091.879] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.880] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\ENYBENY.png", lpFilePart=0x0) returned 0x2d [0091.881] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.882] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x58 [0091.883] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.901] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\ENYBENY.TXT", lpFilePart=0x0) returned 0x28 [0091.901] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.909] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0091.909] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\rac\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.911] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x53 [0091.911] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\rac\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.912] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0091.912] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x20 [0091.912] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.913] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.913] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.913] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.914] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.914] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0091.914] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x20 [0091.914] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.914] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.914] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0091.914] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0091.914] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.914] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0091.914] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x25 [0091.914] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.914] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0091.915] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.915] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0091.915] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x25 [0091.915] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.915] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.915] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0091.915] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x32 [0091.915] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.918] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.918] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0091.918] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x32 [0091.918] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.918] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.918] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3d [0091.920] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\ENYBENY.png", lpFilePart=0x0) returned 0x3d [0091.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x68 [0091.925] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0091.925] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2a [0091.925] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.925] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.925] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0091.925] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2a [0091.925] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0091.926] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.926] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\ENYBENY.TXT", lpFilePart=0x0) returned 0x35 [0091.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\ENYBENY.png", lpFilePart=0x0) returned 0x35 [0091.928] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x60 [0091.929] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\ENYBENY.TXT", lpFilePart=0x0) returned 0x30 [0091.930] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\ENYBENY.png", lpFilePart=0x0) returned 0x30 [0091.932] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5b [0091.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2b [0091.936] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\ENYBENY.png", lpFilePart=0x0) returned 0x2b [0091.938] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x56 [0091.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0091.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x2f [0091.939] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.939] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.940] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0091.940] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x2f [0091.940] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0091.940] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.940] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x3f [0091.940] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x40 [0091.940] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.953] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.954] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x3f [0091.954] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x40 [0091.954] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0091.955] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0091.956] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0091.989] WriteFile (in: hFile=0x248, lpBuffer=0x25f2d78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x25f2d78*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0091.990] CloseHandle (hObject=0x248) returned 1 [0091.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.993] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\user account pictures\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0091.994] GetFileType (hFile=0x248) returned 0x1 [0091.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0091.994] GetFileType (hFile=0x248) returned 0x1 [0091.995] WriteFile (in: hFile=0x248, lpBuffer=0x25fd170*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x25fd170*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0091.996] CloseHandle (hObject=0x248) returned 1 [0091.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0091.996] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0091.997] GetFileType (hFile=0x248) returned 0x1 [0091.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0091.997] GetFileType (hFile=0x248) returned 0x1 [0091.997] WriteFile (in: hFile=0x248, lpBuffer=0x25fe218*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x25fe218*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0091.999] CloseHandle (hObject=0x248) returned 1 [0091.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0091.999] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\user account pictures\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.000] GetFileType (hFile=0x248) returned 0x1 [0092.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.000] GetFileType (hFile=0x248) returned 0x1 [0092.000] WriteFile (in: hFile=0x248, lpBuffer=0x2604e30*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2604e30*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0092.001] CloseHandle (hObject=0x248) returned 1 [0092.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.002] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.002] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.003] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.003] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.003] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.003] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.004] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.004] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.006] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\vault\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.008] GetFileType (hFile=0x248) returned 0x1 [0092.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.008] GetFileType (hFile=0x248) returned 0x1 [0092.008] WriteFile (in: hFile=0x248, lpBuffer=0x2610af8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2610af8*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0092.009] CloseHandle (hObject=0x248) returned 1 [0092.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.010] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\vault\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.010] GetFileType (hFile=0x248) returned 0x1 [0092.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.011] GetFileType (hFile=0x248) returned 0x1 [0092.011] WriteFile (in: hFile=0x248, lpBuffer=0x2611b80*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2611b80*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.012] CloseHandle (hObject=0x248) returned 1 [0092.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.013] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\vault\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.013] GetFileType (hFile=0x248) returned 0x1 [0092.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.013] GetFileType (hFile=0x248) returned 0x1 [0092.013] WriteFile (in: hFile=0x248, lpBuffer=0x2618738*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2618738*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0092.014] CloseHandle (hObject=0x248) returned 1 [0092.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.015] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.016] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.016] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.016] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.017] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.017] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.017] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.017] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.018] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\visio\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.018] GetFileType (hFile=0x248) returned 0x1 [0092.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.018] GetFileType (hFile=0x248) returned 0x1 [0092.019] WriteFile (in: hFile=0x248, lpBuffer=0x2624400*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2624400*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0092.020] CloseHandle (hObject=0x248) returned 1 [0092.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.020] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\visio\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.021] GetFileType (hFile=0x248) returned 0x1 [0092.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.021] GetFileType (hFile=0x248) returned 0x1 [0092.021] WriteFile (in: hFile=0x248, lpBuffer=0x2625488*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2625488*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.022] CloseHandle (hObject=0x248) returned 1 [0092.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.023] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\visio\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.023] GetFileType (hFile=0x248) returned 0x1 [0092.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.024] GetFileType (hFile=0x248) returned 0x1 [0092.024] WriteFile (in: hFile=0x248, lpBuffer=0x262c040*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x262c040*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0092.025] CloseHandle (hObject=0x248) returned 1 [0092.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.025] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.029] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.029] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.029] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.029] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.030] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.030] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.030] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.030] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.031] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.031] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.032] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.032] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.032] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.032] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.033] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.033] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.033] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.033] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1aa4b0) returned 1 [0092.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2c [0092.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.039] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\wwansvc\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.040] GetFileType (hFile=0x248) returned 0x1 [0092.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.040] GetFileType (hFile=0x248) returned 0x1 [0092.041] WriteFile (in: hFile=0x248, lpBuffer=0x2641a58*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2641a58*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0092.042] CloseHandle (hObject=0x248) returned 1 [0092.043] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\ENYBENY.png", lpFilePart=0x0) returned 0x2c [0092.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.043] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\wwansvc\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.044] GetFileType (hFile=0x248) returned 0x1 [0092.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.044] GetFileType (hFile=0x248) returned 0x1 [0092.044] WriteFile (in: hFile=0x248, lpBuffer=0x2642ae8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2642ae8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.046] CloseHandle (hObject=0x248) returned 1 [0092.046] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x57 [0092.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.047] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\wwansvc\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.047] GetFileType (hFile=0x248) returned 0x1 [0092.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.047] GetFileType (hFile=0x248) returned 0x1 [0092.047] WriteFile (in: hFile=0x248, lpBuffer=0x26496a8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26496a8*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0092.048] CloseHandle (hObject=0x248) returned 1 [0092.051] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ENYBENY.TXT", lpFilePart=0x0) returned 0x24 [0092.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0092.051] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.052] GetFileType (hFile=0x248) returned 0x1 [0092.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0092.052] GetFileType (hFile=0x248) returned 0x1 [0092.052] WriteFile (in: hFile=0x248, lpBuffer=0x2653a50*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2653a50*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0092.053] CloseHandle (hObject=0x248) returned 1 [0092.054] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ENYBENY.png", lpFilePart=0x0) returned 0x24 [0092.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.054] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.054] GetFileType (hFile=0x248) returned 0x1 [0092.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0092.054] GetFileType (hFile=0x248) returned 0x1 [0092.055] WriteFile (in: hFile=0x248, lpBuffer=0x2654ad0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x2654ad0*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0092.057] CloseHandle (hObject=0x248) returned 1 [0092.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4f [0092.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0092.058] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.103] GetFileType (hFile=0x248) returned 0x1 [0092.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0092.103] GetFileType (hFile=0x248) returned 0x1 [0092.103] WriteFile (in: hFile=0x248, lpBuffer=0x265b660*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x265b660*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0092.104] CloseHandle (hObject=0x248) returned 1 [0092.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0092.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0092.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\", lpFilePart=0x0) returned 0x1e [0092.105] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0092.148] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.152] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.152] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.152] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.152] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.152] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.153] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.153] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.153] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.153] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.153] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.154] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.154] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.154] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.155] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.155] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0092.155] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0092.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0092.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0092.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0092.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\", lpFilePart=0x0) returned 0x1e [0092.157] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0092.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.163] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.163] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.163] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.163] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.163] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.164] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.164] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.164] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.164] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.165] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.165] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.165] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.165] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.165] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.166] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.166] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.166] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.166] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0092.168] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0092.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0092.170] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\ENYBENY.TXT", lpFilePart=0x0) returned 0x29 [0092.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0092.170] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\ENYBENY.TXT" (normalized: "c:\\programdata\\microsoft help\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.172] GetFileType (hFile=0x248) returned 0x1 [0092.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0092.172] GetFileType (hFile=0x248) returned 0x1 [0092.173] WriteFile (in: hFile=0x248, lpBuffer=0x266e9a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x266e9a8*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0092.174] CloseHandle (hObject=0x248) returned 1 [0092.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\ENYBENY.png", lpFilePart=0x0) returned 0x29 [0092.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.175] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\ENYBENY.png" (normalized: "c:\\programdata\\microsoft help\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.176] GetFileType (hFile=0x248) returned 0x1 [0092.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0092.176] GetFileType (hFile=0x248) returned 0x1 [0092.176] WriteFile (in: hFile=0x248, lpBuffer=0x266fa30*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x266fa30*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0092.178] CloseHandle (hObject=0x248) returned 1 [0092.179] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x54 [0092.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0092.179] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\microsoft help\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.180] GetFileType (hFile=0x248) returned 0x1 [0092.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0092.180] GetFileType (hFile=0x248) returned 0x1 [0092.180] WriteFile (in: hFile=0x248, lpBuffer=0x26765e8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26765e8*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0092.182] CloseHandle (hObject=0x248) returned 1 [0092.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0092.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0092.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\", lpFilePart=0x0) returned 0x17 [0092.183] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0092.184] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.184] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.185] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0092.185] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0092.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0092.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0092.185] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0092.186] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\", lpFilePart=0x0) returned 0x17 [0092.186] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0092.186] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.187] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.187] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0092.187] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0092.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0092.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0092.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x1c [0092.188] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.191] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0092.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x1c [0092.192] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.192] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.193] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.193] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.193] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.194] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x27 [0092.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.194] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\ENYBENY.TXT" (normalized: "c:\\programdata\\mozilla\\logs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.195] GetFileType (hFile=0x248) returned 0x1 [0092.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.195] GetFileType (hFile=0x248) returned 0x1 [0092.199] WriteFile (in: hFile=0x248, lpBuffer=0x2684070*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2684070*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0092.201] CloseHandle (hObject=0x248) returned 1 [0092.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\ENYBENY.png", lpFilePart=0x0) returned 0x27 [0092.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.202] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\ENYBENY.png" (normalized: "c:\\programdata\\mozilla\\logs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.203] GetFileType (hFile=0x248) returned 0x1 [0092.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.204] GetFileType (hFile=0x248) returned 0x1 [0092.204] WriteFile (in: hFile=0x248, lpBuffer=0x26850f0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26850f0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.206] CloseHandle (hObject=0x248) returned 1 [0092.207] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x52 [0092.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.208] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\mozilla\\logs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.259] GetFileType (hFile=0x248) returned 0x1 [0092.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.259] GetFileType (hFile=0x248) returned 0x1 [0092.259] WriteFile (in: hFile=0x248, lpBuffer=0x268bc90*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x268bc90*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0092.260] CloseHandle (hObject=0x248) returned 1 [0092.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\ENYBENY.TXT", lpFilePart=0x0) returned 0x22 [0092.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0092.261] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\ENYBENY.TXT" (normalized: "c:\\programdata\\mozilla\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.261] GetFileType (hFile=0x248) returned 0x1 [0092.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0092.261] GetFileType (hFile=0x248) returned 0x1 [0092.262] WriteFile (in: hFile=0x248, lpBuffer=0x2696028*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2696028*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0092.263] CloseHandle (hObject=0x248) returned 1 [0092.263] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\ENYBENY.png", lpFilePart=0x0) returned 0x22 [0092.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.263] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\ENYBENY.png" (normalized: "c:\\programdata\\mozilla\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.264] GetFileType (hFile=0x248) returned 0x1 [0092.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0092.264] GetFileType (hFile=0x248) returned 0x1 [0092.264] WriteFile (in: hFile=0x248, lpBuffer=0x26970a0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26970a0*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0092.265] CloseHandle (hObject=0x248) returned 1 [0092.266] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4d [0092.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0092.266] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\mozilla\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.266] GetFileType (hFile=0x248) returned 0x1 [0092.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0092.266] GetFileType (hFile=0x248) returned 0x1 [0092.266] WriteFile (in: hFile=0x248, lpBuffer=0x269dc28*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x269dc28*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0092.268] CloseHandle (hObject=0x248) returned 1 [0092.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0092.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0092.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\", lpFilePart=0x0) returned 0x16 [0092.268] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0092.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0092.269] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0092.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0092.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0092.269] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0092.269] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\", lpFilePart=0x0) returned 0x16 [0092.269] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0092.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0092.270] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0092.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0092.270] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\ENYBENY.TXT", lpFilePart=0x0) returned 0x21 [0092.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0092.270] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\ENYBENY.TXT" (normalized: "c:\\programdata\\oracle\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.270] GetFileType (hFile=0x248) returned 0x1 [0092.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0092.271] GetFileType (hFile=0x248) returned 0x1 [0092.271] WriteFile (in: hFile=0x248, lpBuffer=0x26a96c0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26a96c0*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0092.272] CloseHandle (hObject=0x248) returned 1 [0092.272] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\ENYBENY.png", lpFilePart=0x0) returned 0x21 [0092.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.272] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\ENYBENY.png" (normalized: "c:\\programdata\\oracle\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.273] GetFileType (hFile=0x248) returned 0x1 [0092.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0092.273] GetFileType (hFile=0x248) returned 0x1 [0092.273] WriteFile (in: hFile=0x248, lpBuffer=0x26aa738*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26aa738*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0092.313] CloseHandle (hObject=0x248) returned 1 [0092.313] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4c [0092.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0092.314] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\oracle\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.314] GetFileType (hFile=0x248) returned 0x1 [0092.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0092.314] GetFileType (hFile=0x248) returned 0x1 [0092.314] WriteFile (in: hFile=0x248, lpBuffer=0x26b12c0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26b12c0*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0092.315] CloseHandle (hObject=0x248) returned 1 [0092.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0092.316] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0092.316] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\", lpFilePart=0x0) returned 0x1d [0092.316] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0092.331] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.332] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.332] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.332] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.332] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.332] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.332] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.332] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0092.334] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0092.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0092.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0092.335] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0092.335] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\", lpFilePart=0x0) returned 0x1d [0092.335] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0092.336] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.336] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.336] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0092.338] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0092.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0092.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.339] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0092.339] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x46 [0092.339] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.340] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.340] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0092.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x46 [0092.341] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.341] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.341] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.341] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.341] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0092.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x4f [0092.341] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.341] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.341] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.342] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.342] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0092.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x4f [0092.342] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.342] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.342] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.342] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.342] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0092.343] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0092.343] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.343] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.343] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.343] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.343] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0092.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0092.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.343] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0092.343] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0092.343] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.343] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.344] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0092.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0092.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0092.344] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0092.344] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0092.344] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0092.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0092.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0092.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0092.344] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0092.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0092.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0092.346] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0092.346] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0092.347] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0092.347] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0092.347] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0092.347] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0092.347] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0092.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0092.347] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\ENYBENY.TXT", lpFilePart=0x0) returned 0x64 [0092.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0092.347] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0092.351] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\ENYBENY.png", lpFilePart=0x0) returned 0x64 [0092.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0092.351] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0092.352] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8f [0092.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0092.353] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0092.356] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0092.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0092.356] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0092.358] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0092.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0092.358] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0092.359] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0092.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0092.360] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0092.361] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5a [0092.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.361] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0092.365] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\ENYBENY.png", lpFilePart=0x0) returned 0x5a [0092.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0092.365] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0092.367] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x85 [0092.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.367] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0092.370] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\ENYBENY.TXT", lpFilePart=0x0) returned 0x51 [0092.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.370] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.371] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\ENYBENY.png", lpFilePart=0x0) returned 0x51 [0092.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.372] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.373] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7c [0092.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.374] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.387] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0092.387] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x46 [0092.387] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.388] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.389] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0092.389] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x46 [0092.389] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.389] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.389] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0092.389] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x4f [0092.389] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.390] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.390] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.390] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0092.390] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x4f [0092.390] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.390] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.391] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.391] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.391] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0092.391] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0092.391] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.392] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0092.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0092.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.392] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0092.392] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0092.392] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.393] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.393] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0092.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0092.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0092.393] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0092.393] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0092.393] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0092.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0092.394] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0092.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0092.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0092.394] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0092.394] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0092.394] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0092.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0092.394] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0092.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0092.395] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\ENYBENY.TXT", lpFilePart=0x0) returned 0x64 [0092.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0092.395] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0092.396] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\ENYBENY.png", lpFilePart=0x0) returned 0x64 [0092.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0092.396] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0092.398] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8f [0092.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0092.398] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0092.408] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0092.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0092.408] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0092.410] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0092.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0092.410] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0092.412] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0092.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0092.412] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0092.413] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5a [0092.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.413] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0092.415] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\ENYBENY.png", lpFilePart=0x0) returned 0x5a [0092.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0092.415] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0092.417] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x85 [0092.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.417] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0092.418] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\ENYBENY.TXT", lpFilePart=0x0) returned 0x51 [0092.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.419] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.420] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\ENYBENY.png", lpFilePart=0x0) returned 0x51 [0092.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.420] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.422] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7c [0092.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.422] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0092.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0092.434] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.434] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0092.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0092.435] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.435] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.435] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0092.435] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0092.435] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.436] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.436] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.436] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.436] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.437] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0092.437] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0092.437] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.437] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.437] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.437] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.437] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.437] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0092.437] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6d [0092.438] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.438] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.438] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.438] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.438] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.438] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0092.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0092.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.438] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0092.438] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6d [0092.438] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.439] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.439] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0092.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0092.439] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\ENYBENY.TXT", lpFilePart=0x0) returned 0x78 [0092.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0092.439] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0092.441] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\ENYBENY.png", lpFilePart=0x0) returned 0x78 [0092.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0092.441] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0092.445] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa3 [0092.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0092.445] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0092.446] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\ENYBENY.TXT", lpFilePart=0x0) returned 0x63 [0092.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.446] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0092.448] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\ENYBENY.png", lpFilePart=0x0) returned 0x63 [0092.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0092.448] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0092.450] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8e [0092.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.450] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0092.460] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5a [0092.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.460] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.462] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\ENYBENY.png", lpFilePart=0x0) returned 0x5a [0092.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.462] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x85 [0092.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.463] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.466] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0092.467] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x44 [0092.467] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.467] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.467] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.467] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.467] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.467] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.468] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0092.468] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x44 [0092.468] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.468] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.468] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.468] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.468] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.468] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.469] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4f [0092.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.469] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.470] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ENYBENY.png", lpFilePart=0x0) returned 0x4f [0092.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.471] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.482] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7a [0092.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.482] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.484] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0092.484] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0092.484] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.486] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.486] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.486] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.486] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.487] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0092.487] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0092.487] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.487] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.487] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.487] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.487] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0092.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.488] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0092.488] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0092.488] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.488] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.488] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.488] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.488] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0092.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0092.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0092.489] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.489] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0092.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0092.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.490] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0092.490] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0092.490] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.491] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0092.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0092.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.491] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0092.491] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0092.491] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.492] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.492] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.492] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.492] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.492] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0092.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0092.493] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.TXT", lpFilePart=0x0) returned 0x7d [0092.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0092.493] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0092.495] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.png", lpFilePart=0x0) returned 0x7d [0092.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0092.495] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0092.499] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa8 [0092.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0092.500] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0092.501] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\ENYBENY.TXT", lpFilePart=0x0) returned 0x63 [0092.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.502] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0092.507] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\ENYBENY.png", lpFilePart=0x0) returned 0x63 [0092.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0092.507] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0092.510] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8e [0092.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0092.510] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0092.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5a [0092.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.535] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.537] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\ENYBENY.png", lpFilePart=0x0) returned 0x5a [0092.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0092.537] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0092.538] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x85 [0092.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0092.539] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0092.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0092.544] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0092.544] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x44 [0092.544] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.545] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.545] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.545] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.545] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.545] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0092.546] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0092.546] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x44 [0092.546] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.546] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.546] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.546] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.546] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.547] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.549] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4f [0092.550] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.551] WriteFile (in: hFile=0x248, lpBuffer=0x25fdfe0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x25fdfe0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0092.552] CloseHandle (hObject=0x248) returned 1 [0092.552] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ENYBENY.png", lpFilePart=0x0) returned 0x4f [0092.552] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.556] GetFileType (hFile=0x248) returned 0x1 [0092.557] GetFileType (hFile=0x248) returned 0x1 [0092.557] WriteFile (in: hFile=0x248, lpBuffer=0x25ff0b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x25ff0b0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.558] CloseHandle (hObject=0x248) returned 1 [0092.559] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7a [0092.559] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.559] GetFileType (hFile=0x248) returned 0x1 [0092.560] GetFileType (hFile=0x248) returned 0x1 [0092.560] WriteFile (in: hFile=0x248, lpBuffer=0x2605d40*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2605d40*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0092.561] CloseHandle (hObject=0x248) returned 1 [0092.561] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0092.561] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0092.561] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.562] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.563] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0092.563] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0092.563] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.563] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0092.564] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.564] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0092.564] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0092.564] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.565] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.565] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.565] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.566] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.566] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0092.566] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0092.566] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.566] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0092.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0092.567] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.567] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0092.567] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6e [0092.567] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.568] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.569] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0092.569] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6e [0092.569] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.569] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.569] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.570] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0092.570] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0092.570] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\ENYBENY.TXT", lpFilePart=0x0) returned 0x79 [0092.572] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.573] GetFileType (hFile=0x248) returned 0x1 [0092.573] GetFileType (hFile=0x248) returned 0x1 [0092.573] WriteFile (in: hFile=0x248, lpBuffer=0x2618960*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x2618960*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0092.574] CloseHandle (hObject=0x248) returned 1 [0092.575] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\ENYBENY.png", lpFilePart=0x0) returned 0x79 [0092.575] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.585] GetFileType (hFile=0x248) returned 0x1 [0092.585] GetFileType (hFile=0x248) returned 0x1 [0092.585] WriteFile (in: hFile=0x248, lpBuffer=0x2619a88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x2619a88*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.587] CloseHandle (hObject=0x248) returned 1 [0092.587] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa4 [0092.588] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.588] GetFileType (hFile=0x248) returned 0x1 [0092.588] GetFileType (hFile=0x248) returned 0x1 [0092.588] WriteFile (in: hFile=0x248, lpBuffer=0x2620820*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x2620820*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0092.589] CloseHandle (hObject=0x248) returned 1 [0092.590] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\ENYBENY.TXT", lpFilePart=0x0) returned 0x64 [0092.590] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.590] GetFileType (hFile=0x248) returned 0x1 [0092.590] GetFileType (hFile=0x248) returned 0x1 [0092.591] WriteFile (in: hFile=0x248, lpBuffer=0x262acc8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x262acc8*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0092.592] CloseHandle (hObject=0x248) returned 1 [0092.592] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\ENYBENY.png", lpFilePart=0x0) returned 0x64 [0092.592] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.593] GetFileType (hFile=0x248) returned 0x1 [0092.593] GetFileType (hFile=0x248) returned 0x1 [0092.593] WriteFile (in: hFile=0x248, lpBuffer=0x262bdc8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x262bdc8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0092.594] CloseHandle (hObject=0x248) returned 1 [0092.595] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8f [0092.595] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.605] GetFileType (hFile=0x248) returned 0x1 [0092.605] GetFileType (hFile=0x248) returned 0x1 [0092.605] WriteFile (in: hFile=0x248, lpBuffer=0x2632ad8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2632ad8*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0092.606] CloseHandle (hObject=0x248) returned 1 [0092.607] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5b [0092.607] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.607] GetFileType (hFile=0x248) returned 0x1 [0092.607] GetFileType (hFile=0x248) returned 0x1 [0092.608] WriteFile (in: hFile=0x248, lpBuffer=0x263cf50*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x263cf50*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0092.609] CloseHandle (hObject=0x248) returned 1 [0092.609] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\ENYBENY.png", lpFilePart=0x0) returned 0x5b [0092.609] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.610] GetFileType (hFile=0x248) returned 0x1 [0092.610] GetFileType (hFile=0x248) returned 0x1 [0092.610] WriteFile (in: hFile=0x248, lpBuffer=0x263e038*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x263e038*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.612] CloseHandle (hObject=0x248) returned 1 [0092.612] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x86 [0092.612] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.614] GetFileType (hFile=0x248) returned 0x1 [0092.614] GetFileType (hFile=0x248) returned 0x1 [0092.614] WriteFile (in: hFile=0x248, lpBuffer=0x2644d10*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2644d10*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0092.615] CloseHandle (hObject=0x248) returned 1 [0092.616] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0092.616] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0092.616] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.617] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0092.618] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.619] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0092.619] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0092.619] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.620] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.620] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0092.620] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0092.620] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.621] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.621] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0092.621] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0092.621] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.622] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.622] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0092.622] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x71 [0092.622] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.624] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.624] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0092.624] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x71 [0092.624] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.625] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\ENYBENY.TXT", lpFilePart=0x0) returned 0x7c [0092.625] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.626] GetFileType (hFile=0x248) returned 0x1 [0092.626] GetFileType (hFile=0x248) returned 0x1 [0092.626] WriteFile (in: hFile=0x248, lpBuffer=0x2657a88*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x2657a88*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0092.627] CloseHandle (hObject=0x248) returned 1 [0092.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\ENYBENY.png", lpFilePart=0x0) returned 0x7c [0092.628] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.643] GetFileType (hFile=0x248) returned 0x1 [0092.643] GetFileType (hFile=0x248) returned 0x1 [0092.643] WriteFile (in: hFile=0x248, lpBuffer=0x2658bb8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x2658bb8*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.645] CloseHandle (hObject=0x248) returned 1 [0092.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa7 [0092.646] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.646] GetFileType (hFile=0x248) returned 0x1 [0092.646] GetFileType (hFile=0x248) returned 0x1 [0092.646] WriteFile (in: hFile=0x248, lpBuffer=0x265f958*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x265f958*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0092.647] CloseHandle (hObject=0x248) returned 1 [0092.648] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\ENYBENY.TXT", lpFilePart=0x0) returned 0x64 [0092.648] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.648] GetFileType (hFile=0x248) returned 0x1 [0092.648] GetFileType (hFile=0x248) returned 0x1 [0092.649] WriteFile (in: hFile=0x248, lpBuffer=0x2669e00*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2669e00*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0092.650] CloseHandle (hObject=0x248) returned 1 [0092.650] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\ENYBENY.png", lpFilePart=0x0) returned 0x64 [0092.650] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.650] GetFileType (hFile=0x248) returned 0x1 [0092.651] GetFileType (hFile=0x248) returned 0x1 [0092.651] WriteFile (in: hFile=0x248, lpBuffer=0x266af00*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x266af00*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0092.652] CloseHandle (hObject=0x248) returned 1 [0092.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8f [0092.653] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.662] GetFileType (hFile=0x248) returned 0x1 [0092.662] GetFileType (hFile=0x248) returned 0x1 [0092.663] WriteFile (in: hFile=0x248, lpBuffer=0x2671c10*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2671c10*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0092.664] CloseHandle (hObject=0x248) returned 1 [0092.664] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5b [0092.664] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\ENYBENY.TXT" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.665] GetFileType (hFile=0x248) returned 0x1 [0092.665] GetFileType (hFile=0x248) returned 0x1 [0092.665] WriteFile (in: hFile=0x248, lpBuffer=0x267c088*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x267c088*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0092.666] CloseHandle (hObject=0x248) returned 1 [0092.666] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\ENYBENY.png", lpFilePart=0x0) returned 0x5b [0092.667] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\ENYBENY.png" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0092.667] GetFileType (hFile=0x248) returned 0x1 [0092.667] GetFileType (hFile=0x248) returned 0x1 [0092.667] WriteFile (in: hFile=0x248, lpBuffer=0x267d170*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x267d170*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0092.669] CloseHandle (hObject=0x248) returned 1 [0092.672] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x86 [0092.672] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0092.684] GetFileType (hFile=0x248) returned 0x1 [0092.684] GetFileType (hFile=0x248) returned 0x1 [0092.684] WriteFile (in: hFile=0x248, lpBuffer=0x2683e48*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2683e48*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0092.685] CloseHandle (hObject=0x248) returned 1 [0092.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0092.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0092.686] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.687] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0092.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0092.688] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.688] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0092.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0092.688] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.689] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0092.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0092.689] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.690] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0092.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x70 [0092.690] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.691] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0092.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x70 [0092.691] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.691] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\ENYBENY.TXT", lpFilePart=0x0) returned 0x7b [0092.696] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\ENYBENY.png", lpFilePart=0x0) returned 0x7b [0092.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa6 [0092.702] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\ENYBENY.TXT", lpFilePart=0x0) returned 0x64 [0092.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\ENYBENY.png", lpFilePart=0x0) returned 0x64 [0092.705] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8f [0092.722] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5b [0092.723] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\ENYBENY.png", lpFilePart=0x0) returned 0x5b [0092.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x86 [0092.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0092.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0092.739] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.740] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0092.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0092.740] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.740] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.741] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0092.741] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0092.741] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.741] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0092.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0092.742] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.742] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0092.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0092.743] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.743] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0092.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0092.744] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.744] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.TXT", lpFilePart=0x0) returned 0x7d [0092.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\ENYBENY.png", lpFilePart=0x0) returned 0x7d [0092.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa8 [0092.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\ENYBENY.TXT", lpFilePart=0x0) returned 0x63 [0092.755] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\ENYBENY.png", lpFilePart=0x0) returned 0x63 [0092.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8e [0092.759] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5a [0092.761] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\ENYBENY.png", lpFilePart=0x0) returned 0x5a [0092.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x85 [0092.797] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0092.797] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0092.797] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.798] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0092.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0092.798] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.799] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.799] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0092.799] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0092.799] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.800] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.800] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0092.800] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0092.800] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.800] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.801] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0092.801] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x6f [0092.801] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.801] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.801] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0092.802] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x6f [0092.802] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.802] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.802] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\ENYBENY.TXT", lpFilePart=0x0) returned 0x7a [0092.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\ENYBENY.png", lpFilePart=0x0) returned 0x7a [0092.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa5 [0092.853] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.861] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.861] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.862] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.862] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.864] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.864] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.864] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.865] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.866] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.866] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.866] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.985] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.985] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.986] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0092.986] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.986] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.987] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.987] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0092.987] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.987] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.988] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0092.988] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0092.989] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.014] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.015] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.015] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.015] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.061] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.084] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.085] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.085] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.085] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0093.085] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.086] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0093.086] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.086] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0093.086] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.087] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0093.087] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0093.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0093.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0093.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0093.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0093.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0093.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0093.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.456] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.457] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.457] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.457] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0093.458] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0093.458] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0093.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0093.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0093.459] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0093.459] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0093.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0093.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.459] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0093.460] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0093.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0093.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.460] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0093.460] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0093.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0093.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0093.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0093.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0093.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0093.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0093.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0093.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0093.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0093.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0093.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0093.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0093.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0093.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0093.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.518] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.518] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.519] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.519] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0093.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.555] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.556] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.556] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.556] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0093.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.568] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.569] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.569] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.569] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0093.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.581] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.581] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.582] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.582] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0093.582] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0093.582] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0093.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0093.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0093.583] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0093.583] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0093.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0093.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.583] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0093.583] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0093.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0093.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.584] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0093.584] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0093.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0093.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0093.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0093.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0093.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0093.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0093.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0093.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0093.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0093.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0093.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0093.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0093.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0093.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0093.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0093.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0093.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0093.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0093.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0093.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0093.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0093.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0093.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0093.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0093.645] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0xffffffffffffffff [0093.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add60) returned 1 [0093.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Start Menu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Start Menu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x25 [0093.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0093.651] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\ENYBENY.TXT" (normalized: "c:\\programdata\\start menu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0093.652] GetFileType (hFile=0x248) returned 0x1 [0093.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0093.652] GetFileType (hFile=0x248) returned 0x1 [0093.653] WriteFile (in: hFile=0x248, lpBuffer=0x26ec7c0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26ec7c0*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0093.654] CloseHandle (hObject=0x248) returned 1 [0093.654] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Start Menu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Start Menu\\ENYBENY.png", lpFilePart=0x0) returned 0x25 [0093.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0093.654] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\ENYBENY.png" (normalized: "c:\\programdata\\start menu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0093.655] GetFileType (hFile=0x248) returned 0x1 [0093.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0093.655] GetFileType (hFile=0x248) returned 0x1 [0093.655] WriteFile (in: hFile=0x248, lpBuffer=0x26ed840*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26ed840*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0093.657] CloseHandle (hObject=0x248) returned 1 [0093.658] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Start Menu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Start Menu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x50 [0093.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0093.658] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\start menu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0093.659] GetFileType (hFile=0x248) returned 0x1 [0093.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0093.659] GetFileType (hFile=0x248) returned 0x1 [0093.659] WriteFile (in: hFile=0x248, lpBuffer=0x26f43e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26f43e0*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0093.660] CloseHandle (hObject=0x248) returned 1 [0093.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0093.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun", lpFilePart=0x0) returned 0x12 [0093.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\", lpFilePart=0x0) returned 0x13 [0093.661] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0093.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0093.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0093.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0093.662] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0093.663] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun", lpFilePart=0x0) returned 0x12 [0093.663] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\", lpFilePart=0x0) returned 0x13 [0093.663] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0093.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0093.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0093.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0093.663] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.664] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java", lpFilePart=0x0) returned 0x17 [0093.664] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\", lpFilePart=0x0) returned 0x18 [0093.664] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0093.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0093.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0093.665] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0093.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java", lpFilePart=0x0) returned 0x17 [0093.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\", lpFilePart=0x0) returned 0x18 [0093.665] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0093.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0093.666] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0093.666] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0093.666] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0093.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0093.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0093.666] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x23 [0093.666] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\", lpFilePart=0x0) returned 0x24 [0093.666] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0093.667] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0093.667] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0093.667] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0093.667] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0093.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0093.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0093.667] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x23 [0093.667] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\", lpFilePart=0x0) returned 0x24 [0093.667] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0093.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0093.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0093.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0093.668] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0093.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0093.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0093.669] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.EnyBenied", lpFilePart=0x0) returned 0x3c [0093.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0093.669] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.EnyBenied" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0093.670] GetFileType (hFile=0x248) returned 0x1 [0093.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0093.670] GetFileType (hFile=0x248) returned 0x1 [0094.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0094.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0094.191] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x24c [0094.191] GetFileType (hFile=0x24c) returned 0x1 [0094.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0094.191] GetFileType (hFile=0x24c) returned 0x1 [0094.191] ReadFile (in: hFile=0x24c, lpBuffer=0x263fdd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x263fdd0*, lpNumberOfBytesRead=0x1add08*=0x77, lpOverlapped=0x0) returned 1 [0094.193] ReadFile (in: hFile=0x24c, lpBuffer=0x263fdd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x263fdd0*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0094.193] CloseHandle (hObject=0x24c) returned 1 [0094.193] WriteFile (in: hFile=0x248, lpBuffer=0x263e388*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x263e388*, lpNumberOfBytesWritten=0x1adbd8*=0xa0, lpOverlapped=0x0) returned 1 [0094.194] CloseHandle (hObject=0x248) returned 1 [0094.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0094.195] DeleteFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml")) returned 1 [0094.201] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0094.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0094.202] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\ENYBENY.TXT" (normalized: "c:\\programdata\\sun\\java\\java update\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.202] GetFileType (hFile=0x248) returned 0x1 [0094.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0094.202] GetFileType (hFile=0x248) returned 0x1 [0094.202] WriteFile (in: hFile=0x248, lpBuffer=0x264a318*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x264a318*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0094.203] CloseHandle (hObject=0x248) returned 1 [0094.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0094.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0094.204] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\ENYBENY.png" (normalized: "c:\\programdata\\sun\\java\\java update\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.204] GetFileType (hFile=0x248) returned 0x1 [0094.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0094.204] GetFileType (hFile=0x248) returned 0x1 [0094.204] WriteFile (in: hFile=0x248, lpBuffer=0x264b3a8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x264b3a8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0094.206] CloseHandle (hObject=0x248) returned 1 [0094.206] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0094.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0094.206] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\sun\\java\\java update\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.223] GetFileType (hFile=0x248) returned 0x1 [0094.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0094.223] GetFileType (hFile=0x248) returned 0x1 [0094.223] WriteFile (in: hFile=0x248, lpBuffer=0x2651f78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2651f78*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0094.224] CloseHandle (hObject=0x248) returned 1 [0094.227] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\ENYBENY.TXT", lpFilePart=0x0) returned 0x23 [0094.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0094.227] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\ENYBENY.TXT" (normalized: "c:\\programdata\\sun\\java\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.228] GetFileType (hFile=0x248) returned 0x1 [0094.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0094.228] GetFileType (hFile=0x248) returned 0x1 [0094.228] WriteFile (in: hFile=0x248, lpBuffer=0x265c310*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x265c310*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0094.229] CloseHandle (hObject=0x248) returned 1 [0094.229] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\ENYBENY.png", lpFilePart=0x0) returned 0x23 [0094.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0094.230] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\ENYBENY.png" (normalized: "c:\\programdata\\sun\\java\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.230] GetFileType (hFile=0x248) returned 0x1 [0094.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0094.230] GetFileType (hFile=0x248) returned 0x1 [0094.230] WriteFile (in: hFile=0x248, lpBuffer=0x265d388*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x265d388*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0094.232] CloseHandle (hObject=0x248) returned 1 [0094.232] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4e [0094.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0094.232] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\sun\\java\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.240] GetFileType (hFile=0x248) returned 0x1 [0094.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0094.241] GetFileType (hFile=0x248) returned 0x1 [0094.241] WriteFile (in: hFile=0x248, lpBuffer=0x2663f10*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2663f10*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0094.242] CloseHandle (hObject=0x248) returned 1 [0094.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\ENYBENY.TXT", lpFilePart=0x0) returned 0x1e [0094.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0094.242] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\ENYBENY.TXT" (normalized: "c:\\programdata\\sun\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.243] GetFileType (hFile=0x248) returned 0x1 [0094.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0094.243] GetFileType (hFile=0x248) returned 0x1 [0094.243] WriteFile (in: hFile=0x248, lpBuffer=0x266e298*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x266e298*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0094.244] CloseHandle (hObject=0x248) returned 1 [0094.245] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\ENYBENY.png", lpFilePart=0x0) returned 0x1e [0094.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0094.245] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\ENYBENY.png" (normalized: "c:\\programdata\\sun\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.245] GetFileType (hFile=0x248) returned 0x1 [0094.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0094.245] GetFileType (hFile=0x248) returned 0x1 [0094.245] WriteFile (in: hFile=0x248, lpBuffer=0x266f308*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x266f308*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0094.247] CloseHandle (hObject=0x248) returned 1 [0094.247] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x49 [0094.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0094.247] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\sun\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.247] GetFileType (hFile=0x248) returned 0x1 [0094.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0094.248] GetFileType (hFile=0x248) returned 0x1 [0094.248] WriteFile (in: hFile=0x248, lpBuffer=0x2675e78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2675e78*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0094.249] CloseHandle (hObject=0x248) returned 1 [0094.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0094.249] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates", lpFilePart=0x0) returned 0x18 [0094.249] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\", lpFilePart=0x0) returned 0x19 [0094.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0xffffffffffffffff [0094.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add60) returned 1 [0094.255] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\ENYBENY.TXT", lpFilePart=0x0) returned 0x24 [0094.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0094.255] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\ENYBENY.TXT" (normalized: "c:\\programdata\\templates\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.255] GetFileType (hFile=0x248) returned 0x1 [0094.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0094.256] GetFileType (hFile=0x248) returned 0x1 [0094.256] WriteFile (in: hFile=0x248, lpBuffer=0x2681430*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2681430*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0094.257] CloseHandle (hObject=0x248) returned 1 [0094.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\ENYBENY.png", lpFilePart=0x0) returned 0x24 [0094.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0094.258] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\ENYBENY.png" (normalized: "c:\\programdata\\templates\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.258] GetFileType (hFile=0x248) returned 0x1 [0094.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0094.258] GetFileType (hFile=0x248) returned 0x1 [0094.258] WriteFile (in: hFile=0x248, lpBuffer=0x26824b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26824b0*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0094.260] CloseHandle (hObject=0x248) returned 1 [0094.260] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4f [0094.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0094.260] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\templates\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.261] GetFileType (hFile=0x248) returned 0x1 [0094.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0094.261] GetFileType (hFile=0x248) returned 0x1 [0094.261] WriteFile (in: hFile=0x248, lpBuffer=0x2689040*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x2689040*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0094.263] CloseHandle (hObject=0x248) returned 1 [0094.265] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\ENYBENY.TXT", lpFilePart=0x0) returned 0x1a [0094.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0094.265] CreateFileW (lpFileName="C:\\ProgramData\\ENYBENY.TXT" (normalized: "c:\\programdata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.266] GetFileType (hFile=0x248) returned 0x1 [0094.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0094.266] GetFileType (hFile=0x248) returned 0x1 [0094.266] WriteFile (in: hFile=0x248, lpBuffer=0x26933b8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x26933b8*, lpNumberOfBytesWritten=0x1add98*=0x394, lpOverlapped=0x0) returned 1 [0094.267] CloseHandle (hObject=0x248) returned 1 [0094.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad8d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\ENYBENY.png", lpFilePart=0x0) returned 0x1a [0094.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0094.268] CreateFileW (lpFileName="C:\\ProgramData\\ENYBENY.png" (normalized: "c:\\programdata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.268] GetFileType (hFile=0x248) returned 0x1 [0094.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add20) returned 1 [0094.268] GetFileType (hFile=0x248) returned 0x1 [0094.268] WriteFile (in: hFile=0x248, lpBuffer=0x2694420*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1aded8, lpOverlapped=0x0 | out: lpBuffer=0x2694420*, lpNumberOfBytesWritten=0x1aded8*=0x50df, lpOverlapped=0x0) returned 1 [0094.270] CloseHandle (hObject=0x248) returned 1 [0094.270] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x45 [0094.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0094.270] CreateFileW (lpFileName="C:\\ProgramData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\programdata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.270] GetFileType (hFile=0x248) returned 0x1 [0094.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0094.271] GetFileType (hFile=0x248) returned 0x1 [0094.272] WriteFile (in: hFile=0x248, lpBuffer=0x269af78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x269af78*, lpNumberOfBytesWritten=0x1add98*=0xc6, lpOverlapped=0x0) returned 1 [0094.273] CloseHandle (hObject=0x248) returned 1 [0094.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0094.273] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0094.273] GetFullPathNameW (in: lpFileName="C:\\Recovery\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\", lpFilePart=0x0) returned 0xc [0094.273] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0600 [0094.274] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.274] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.274] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0094.275] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0094.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0094.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0094.275] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0094.275] GetFullPathNameW (in: lpFileName="C:\\Recovery\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\", lpFilePart=0x0) returned 0xc [0094.275] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0600 [0094.275] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.275] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.276] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0094.276] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0094.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0094.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0094.276] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0094.276] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", lpFilePart=0x0) returned 0x31 [0094.276] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0094.276] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.277] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.277] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.277] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0094.277] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0094.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0094.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0094.277] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0094.277] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", lpFilePart=0x0) returned 0x31 [0094.277] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0094.278] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.278] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.278] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.278] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0094.278] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0094.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0094.279] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3c [0094.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0094.279] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\ENYBENY.TXT" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.279] GetFileType (hFile=0x248) returned 0x1 [0094.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0094.279] GetFileType (hFile=0x248) returned 0x1 [0094.280] WriteFile (in: hFile=0x248, lpBuffer=0x26a90a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26a90a0*, lpNumberOfBytesWritten=0x1add18*=0x394, lpOverlapped=0x0) returned 1 [0094.281] CloseHandle (hObject=0x248) returned 1 [0094.281] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\ENYBENY.png", lpFilePart=0x0) returned 0x3c [0094.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0094.281] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\ENYBENY.png" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.282] GetFileType (hFile=0x248) returned 0x1 [0094.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0094.282] GetFileType (hFile=0x248) returned 0x1 [0094.282] WriteFile (in: hFile=0x248, lpBuffer=0x26aa150*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x26aa150*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0094.283] CloseHandle (hObject=0x248) returned 1 [0094.284] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x67 [0094.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0094.284] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.289] GetFileType (hFile=0x248) returned 0x1 [0094.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0094.289] GetFileType (hFile=0x248) returned 0x1 [0094.289] WriteFile (in: hFile=0x248, lpBuffer=0x26b0d70*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add18, lpOverlapped=0x0 | out: lpBuffer=0x26b0d70*, lpNumberOfBytesWritten=0x1add18*=0xc6, lpOverlapped=0x0) returned 1 [0094.290] CloseHandle (hObject=0x248) returned 1 [0094.290] GetFullPathNameW (in: lpFileName="C:\\Recovery\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\ENYBENY.TXT", lpFilePart=0x0) returned 0x17 [0094.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0094.291] CreateFileW (lpFileName="C:\\Recovery\\ENYBENY.TXT" (normalized: "c:\\recovery\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.291] GetFileType (hFile=0x248) returned 0x1 [0094.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0094.291] GetFileType (hFile=0x248) returned 0x1 [0094.292] WriteFile (in: hFile=0x248, lpBuffer=0x26bb0d8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x26bb0d8*, lpNumberOfBytesWritten=0x1add98*=0x394, lpOverlapped=0x0) returned 1 [0094.293] CloseHandle (hObject=0x248) returned 1 [0094.293] GetFullPathNameW (in: lpFileName="C:\\Recovery\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\ENYBENY.png", lpFilePart=0x0) returned 0x17 [0094.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0094.293] CreateFileW (lpFileName="C:\\Recovery\\ENYBENY.png" (normalized: "c:\\recovery\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.294] GetFileType (hFile=0x248) returned 0x1 [0094.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add20) returned 1 [0094.294] GetFileType (hFile=0x248) returned 0x1 [0094.294] WriteFile (in: hFile=0x248, lpBuffer=0x26bc138*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1aded8, lpOverlapped=0x0 | out: lpBuffer=0x26bc138*, lpNumberOfBytesWritten=0x1aded8*=0x50df, lpOverlapped=0x0) returned 1 [0094.295] CloseHandle (hObject=0x248) returned 1 [0094.296] GetFullPathNameW (in: lpFileName="C:\\Recovery\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x42 [0094.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0094.296] CreateFileW (lpFileName="C:\\Recovery\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\recovery\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.305] GetFileType (hFile=0x248) returned 0x1 [0094.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0094.305] GetFileType (hFile=0x248) returned 0x1 [0094.305] WriteFile (in: hFile=0x248, lpBuffer=0x26c2c78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1add98, lpOverlapped=0x0 | out: lpBuffer=0x26c2c78*, lpNumberOfBytesWritten=0x1add98*=0xc6, lpOverlapped=0x0) returned 1 [0094.306] CloseHandle (hObject=0x248) returned 1 [0094.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0094.306] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0094.306] GetFullPathNameW (in: lpFileName="C:\\System Volume Information\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information\\", lpFilePart=0x0) returned 0x1d [0094.306] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0xffffffffffffffff [0094.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adde0) returned 1 [0094.311] GetFullPathNameW (in: lpFileName="C:\\System Volume Information\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad810, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information\\ENYBENY.TXT", lpFilePart=0x0) returned 0x28 [0094.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcf0) returned 1 [0094.311] CreateFileW (lpFileName="C:\\System Volume Information\\ENYBENY.TXT" (normalized: "c:\\system volume information\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1aa630) returned 1 [0094.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0094.314] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0094.314] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0094.314] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0600 [0094.314] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.315] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.315] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.315] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.315] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.315] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.315] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.315] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.316] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.316] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.316] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0094.316] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0094.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0094.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adeb0) returned 1 [0094.316] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ad9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0094.316] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x1ad940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0094.316] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x1adb50 | out: lpFindFileData=0x1adb50) returned 0x2e0600 [0094.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 1 [0094.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adba0 | out: lpFindFileData=0x1adba0) returned 0 [0094.318] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ade00) returned 1 [0094.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1addc0) returned 1 [0094.319] GetFullPathNameW (in: lpFileName="C:\\Users\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x1e [0094.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add50) returned 1 [0094.319] CreateFileW (lpFileName="C:\\Users\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.320] GetFileType (hFile=0x248) returned 0x1 [0094.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0094.320] GetFileType (hFile=0x248) returned 0x1 [0094.854] GetFullPathNameW (in: lpFileName="C:\\Users\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\ENYBENY.png", lpFilePart=0x0) returned 0x14 [0094.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add50) returned 1 [0094.854] CreateFileW (lpFileName="C:\\Users\\ENYBENY.png" (normalized: "c:\\users\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x24c [0094.854] GetFileType (hFile=0x24c) returned 0x1 [0094.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0094.854] GetFileType (hFile=0x24c) returned 0x1 [0094.854] ReadFile (in: hFile=0x24c, lpBuffer=0x2616528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade88, lpOverlapped=0x0 | out: lpBuffer=0x2616528*, lpNumberOfBytesRead=0x1ade88*=0x1000, lpOverlapped=0x0) returned 1 [0094.858] WriteFile (in: hFile=0x248, lpBuffer=0x2614b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ade18, lpOverlapped=0x0 | out: lpBuffer=0x2614b20*, lpNumberOfBytesWritten=0x1ade18*=0x1000, lpOverlapped=0x0) returned 1 [0094.859] ReadFile (in: hFile=0x24c, lpBuffer=0x2616528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade88, lpOverlapped=0x0 | out: lpBuffer=0x2616528*, lpNumberOfBytesRead=0x1ade88*=0x1000, lpOverlapped=0x0) returned 1 [0094.860] WriteFile (in: hFile=0x248, lpBuffer=0x2614b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ade18, lpOverlapped=0x0 | out: lpBuffer=0x2614b20*, lpNumberOfBytesWritten=0x1ade18*=0x1000, lpOverlapped=0x0) returned 1 [0094.860] ReadFile (in: hFile=0x24c, lpBuffer=0x2616528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade88, lpOverlapped=0x0 | out: lpBuffer=0x2616528*, lpNumberOfBytesRead=0x1ade88*=0x1000, lpOverlapped=0x0) returned 1 [0094.860] WriteFile (in: hFile=0x248, lpBuffer=0x2614b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ade18, lpOverlapped=0x0 | out: lpBuffer=0x2614b20*, lpNumberOfBytesWritten=0x1ade18*=0x1000, lpOverlapped=0x0) returned 1 [0094.860] ReadFile (in: hFile=0x24c, lpBuffer=0x2616528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade88, lpOverlapped=0x0 | out: lpBuffer=0x2616528*, lpNumberOfBytesRead=0x1ade88*=0x1000, lpOverlapped=0x0) returned 1 [0094.860] WriteFile (in: hFile=0x248, lpBuffer=0x2614b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ade18, lpOverlapped=0x0 | out: lpBuffer=0x2614b20*, lpNumberOfBytesWritten=0x1ade18*=0x1000, lpOverlapped=0x0) returned 1 [0094.860] ReadFile (in: hFile=0x24c, lpBuffer=0x2616528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade88, lpOverlapped=0x0 | out: lpBuffer=0x2616528*, lpNumberOfBytesRead=0x1ade88*=0x1000, lpOverlapped=0x0) returned 1 [0094.860] WriteFile (in: hFile=0x248, lpBuffer=0x2614b20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ade18, lpOverlapped=0x0 | out: lpBuffer=0x2614b20*, lpNumberOfBytesWritten=0x1ade18*=0x1000, lpOverlapped=0x0) returned 1 [0094.861] ReadFile (in: hFile=0x24c, lpBuffer=0x2616528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade88, lpOverlapped=0x0 | out: lpBuffer=0x2616528*, lpNumberOfBytesRead=0x1ade88*=0xdf, lpOverlapped=0x0) returned 1 [0094.861] ReadFile (in: hFile=0x24c, lpBuffer=0x2616528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade88, lpOverlapped=0x0 | out: lpBuffer=0x2616528*, lpNumberOfBytesRead=0x1ade88*=0x0, lpOverlapped=0x0) returned 1 [0094.861] CloseHandle (hObject=0x24c) returned 1 [0094.861] WriteFile (in: hFile=0x248, lpBuffer=0x2614b20*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x2614b20*, lpNumberOfBytesWritten=0x1add58*=0x100, lpOverlapped=0x0) returned 1 [0094.861] CloseHandle (hObject=0x248) returned 1 [0094.862] GetFullPathNameW (in: lpFileName="C:\\Users\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\ENYBENY.png", lpFilePart=0x0) returned 0x14 [0094.862] DeleteFileW (lpFileName="C:\\Users\\ENYBENY.png" (normalized: "c:\\users\\enybeny.png")) returned 1 [0094.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0094.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0094.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e [0094.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0094.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.867] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.867] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.867] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.867] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.868] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.868] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.868] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.869] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.869] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.869] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.870] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.870] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.870] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.870] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.873] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.873] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.873] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.874] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.874] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.874] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.875] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0094.875] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0094.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0094.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0094.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0094.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e [0094.876] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2e0600 [0094.876] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.876] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.877] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.877] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.877] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.877] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.877] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.877] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.878] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.879] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.879] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.879] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.880] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.880] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.880] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.881] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.881] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.881] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.881] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.882] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.882] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.882] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.882] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.883] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.883] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.883] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.883] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0094.884] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0094.884] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0094.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0094.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0094.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0094.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", lpFilePart=0x0) returned 0x26 [0094.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0094.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0094.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0094.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0094.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0094.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0094.887] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0094.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0094.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0094.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0094.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", lpFilePart=0x0) returned 0x26 [0094.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0600 [0094.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0094.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0094.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0094.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0094.889] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0094.889] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0094.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0094.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0094.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0094.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", lpFilePart=0x0) returned 0x2c [0094.889] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0094.890] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.890] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.890] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.892] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.892] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.892] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.892] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.893] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.893] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.893] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.893] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.893] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0094.893] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0094.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0094.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0094.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0094.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", lpFilePart=0x0) returned 0x2c [0094.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0600 [0094.894] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.894] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.894] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.896] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.896] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.896] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.896] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.897] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.897] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0094.897] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0094.897] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0094.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0094.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0094.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0094.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", lpFilePart=0x0) returned 0x32 [0094.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0094.898] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0094.899] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0094.899] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0094.899] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0094.899] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0094.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0094.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0094.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0094.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", lpFilePart=0x0) returned 0x32 [0094.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0094.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0094.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0094.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0094.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0094.901] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0094.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0094.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0094.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0094.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3a [0094.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0094.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.902] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.902] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0094.902] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0094.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0094.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0094.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0094.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3a [0094.902] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0094.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0094.903] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0094.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0094.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0094.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0094.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x3f [0094.904] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0094.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0094.905] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0094.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0094.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0094.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0094.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x3f [0094.907] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0094.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0094.908] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0094.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0094.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0094.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0094.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", lpFilePart=0x0) returned 0x45 [0094.910] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0094.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0094.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0094.912] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0094.913] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0094.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0094.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0094.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0094.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", lpFilePart=0x0) returned 0x45 [0094.913] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0094.913] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0094.914] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0094.914] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0094.914] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0094.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0094.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x50 [0094.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0094.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.915] GetFileType (hFile=0x248) returned 0x1 [0094.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0094.916] GetFileType (hFile=0x248) returned 0x1 [0094.916] WriteFile (in: hFile=0x248, lpBuffer=0x263e980*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x263e980*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0094.917] CloseHandle (hObject=0x248) returned 1 [0094.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\ENYBENY.png", lpFilePart=0x0) returned 0x50 [0094.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0094.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0094.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7b [0094.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0094.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0094.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0094.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0094.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0094.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0094.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0094.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0094.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0094.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0094.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0094.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\ENYBENY.TXT", lpFilePart=0x0) returned 0x45 [0094.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0094.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0094.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\ENYBENY.png", lpFilePart=0x0) returned 0x45 [0094.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0094.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0094.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x70 [0094.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0094.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0094.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0094.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0094.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", lpFilePart=0x0) returned 0x38 [0094.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0094.950] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.950] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.950] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.951] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0094.951] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0094.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0094.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0094.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0094.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", lpFilePart=0x0) returned 0x38 [0094.951] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0094.951] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.951] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.951] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0094.951] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0094.951] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0094.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0094.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0094.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0094.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", lpFilePart=0x0) returned 0x41 [0094.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0094.953] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.953] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.953] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.953] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0094.953] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0094.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0094.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0094.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0094.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", lpFilePart=0x0) returned 0x41 [0094.954] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0094.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0094.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0094.954] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0094.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0094.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0094.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4c [0094.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0094.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0094.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\ENYBENY.png", lpFilePart=0x0) returned 0x4c [0094.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0094.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0094.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x77 [0094.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0094.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0094.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ENYBENY.TXT", lpFilePart=0x0) returned 0x43 [0094.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0094.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0094.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ENYBENY.png", lpFilePart=0x0) returned 0x43 [0094.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0094.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0094.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6e [0094.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0094.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0094.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3d [0094.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0094.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0094.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\ENYBENY.png", lpFilePart=0x0) returned 0x3d [0094.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0094.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0094.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0094.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x68 [0094.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0094.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0094.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0094.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0094.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x3c [0094.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\", lpFilePart=0x0) returned 0x3d [0094.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0xffffffffffffffff [0094.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0095.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\ENYBENY.TXT", lpFilePart=0x0) returned 0x48 [0095.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0095.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.001] GetFileType (hFile=0x248) returned 0x1 [0095.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0095.001] GetFileType (hFile=0x248) returned 0x1 [0095.001] WriteFile (in: hFile=0x248, lpBuffer=0x26b1480*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26b1480*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0095.003] CloseHandle (hObject=0x248) returned 1 [0095.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\ENYBENY.png", lpFilePart=0x0) returned 0x48 [0095.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.004] GetFileType (hFile=0x248) returned 0x1 [0095.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0095.004] GetFileType (hFile=0x248) returned 0x1 [0095.004] WriteFile (in: hFile=0x248, lpBuffer=0x26b2548*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x26b2548*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0095.006] CloseHandle (hObject=0x248) returned 1 [0095.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x73 [0095.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0095.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.007] GetFileType (hFile=0x248) returned 0x1 [0095.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0095.007] GetFileType (hFile=0x248) returned 0x1 [0095.007] WriteFile (in: hFile=0x248, lpBuffer=0x26b91b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26b91b0*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0095.008] CloseHandle (hObject=0x248) returned 1 [0095.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0095.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0095.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", lpFilePart=0x0) returned 0x31 [0095.009] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0095.009] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.010] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.010] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0095.010] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0095.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0095.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0095.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0095.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", lpFilePart=0x0) returned 0x31 [0095.010] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0095.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0095.011] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0095.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0095.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0095.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0095.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", lpFilePart=0x0) returned 0x35 [0095.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0095.012] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.012] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.012] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.012] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0095.012] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0095.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0095.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0095.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0095.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", lpFilePart=0x0) returned 0x35 [0095.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0095.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0095.014] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0095.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0095.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0095.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", lpFilePart=0x0) returned 0x3a [0095.014] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0095.015] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.015] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.015] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0095.015] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0095.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0095.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0095.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", lpFilePart=0x0) returned 0x3a [0095.016] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0095.016] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.016] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.016] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0095.016] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0095.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0095.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0095.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", lpFilePart=0x0) returned 0x47 [0095.017] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.017] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.017] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.017] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.018] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0095.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", lpFilePart=0x0) returned 0x47 [0095.018] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.018] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.018] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.018] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.019] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0095.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", lpFilePart=0x0) returned 0x54 [0095.019] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.019] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.020] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0095.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", lpFilePart=0x0) returned 0x54 [0095.020] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.021] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.021] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.021] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0095.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0095.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x8b [0095.021] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0095.022] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0095.022] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0095.023] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0095.023] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0095.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0095.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0095.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0095.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x8b [0095.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0095.023] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0095.024] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0095.024] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0095.024] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0095.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0095.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0095.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", lpFilePart=0x0) returned 0x90 [0095.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0095.025] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.025] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0095.025] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0095.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0095.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0095.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", lpFilePart=0x0) returned 0x90 [0095.025] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0095.025] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.026] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0095.026] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0095.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0095.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9b [0095.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0095.027] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.028] GetFileType (hFile=0x248) returned 0x1 [0095.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0095.028] GetFileType (hFile=0x248) returned 0x1 [0095.028] WriteFile (in: hFile=0x248, lpBuffer=0x26d5330*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad898, lpOverlapped=0x0 | out: lpBuffer=0x26d5330*, lpNumberOfBytesWritten=0x1ad898*=0x394, lpOverlapped=0x0) returned 1 [0095.029] CloseHandle (hObject=0x248) returned 1 [0095.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\ENYBENY.png", lpFilePart=0x0) returned 0x9b [0095.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0095.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.030] GetFileType (hFile=0x248) returned 0x1 [0095.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0095.031] GetFileType (hFile=0x248) returned 0x1 [0095.031] WriteFile (in: hFile=0x248, lpBuffer=0x26d6498*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x26d6498*, lpNumberOfBytesWritten=0x1ad9d8*=0x50df, lpOverlapped=0x0) returned 1 [0095.032] CloseHandle (hObject=0x248) returned 1 [0095.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc6 [0095.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0095.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.033] GetFileType (hFile=0x248) returned 0x1 [0095.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0095.033] GetFileType (hFile=0x248) returned 0x1 [0095.033] WriteFile (in: hFile=0x248, lpBuffer=0x26dd2f0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad898, lpOverlapped=0x0 | out: lpBuffer=0x26dd2f0*, lpNumberOfBytesWritten=0x1ad898*=0xc6, lpOverlapped=0x0) returned 1 [0095.034] CloseHandle (hObject=0x248) returned 1 [0095.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0095.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0095.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.038] GetFileType (hFile=0x248) returned 0x1 [0095.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0095.038] GetFileType (hFile=0x248) returned 0x1 [0095.038] WriteFile (in: hFile=0x248, lpBuffer=0x26e7858*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x26e7858*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0095.039] CloseHandle (hObject=0x248) returned 1 [0095.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0095.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0095.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.040] GetFileType (hFile=0x248) returned 0x1 [0095.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0095.040] GetFileType (hFile=0x248) returned 0x1 [0095.040] WriteFile (in: hFile=0x248, lpBuffer=0x26e89b8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x26e89b8*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0095.042] CloseHandle (hObject=0x248) returned 1 [0095.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0095.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0095.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.050] GetFileType (hFile=0x248) returned 0x1 [0095.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0095.050] GetFileType (hFile=0x248) returned 0x1 [0095.051] WriteFile (in: hFile=0x248, lpBuffer=0x26ef7f8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x26ef7f8*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0095.052] CloseHandle (hObject=0x248) returned 1 [0095.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5f [0095.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.053] GetFileType (hFile=0x248) returned 0x1 [0095.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.053] GetFileType (hFile=0x248) returned 0x1 [0095.053] WriteFile (in: hFile=0x248, lpBuffer=0x26f9c80*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x26f9c80*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0095.055] CloseHandle (hObject=0x248) returned 1 [0095.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\ENYBENY.png", lpFilePart=0x0) returned 0x5f [0095.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.056] GetFileType (hFile=0x248) returned 0x1 [0095.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0095.056] GetFileType (hFile=0x248) returned 0x1 [0095.056] WriteFile (in: hFile=0x248, lpBuffer=0x26fad70*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26fad70*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0095.057] CloseHandle (hObject=0x248) returned 1 [0095.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8a [0095.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.068] GetFileType (hFile=0x248) returned 0x1 [0095.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.068] GetFileType (hFile=0x248) returned 0x1 [0095.069] WriteFile (in: hFile=0x248, lpBuffer=0x2701a60*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2701a60*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0095.070] CloseHandle (hObject=0x248) returned 1 [0095.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\ENYBENY.TXT", lpFilePart=0x0) returned 0x52 [0095.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0095.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.071] GetFileType (hFile=0x248) returned 0x1 [0095.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0095.071] GetFileType (hFile=0x248) returned 0x1 [0095.071] WriteFile (in: hFile=0x248, lpBuffer=0x270beb8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x270beb8*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0095.072] CloseHandle (hObject=0x248) returned 1 [0095.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\ENYBENY.png", lpFilePart=0x0) returned 0x52 [0095.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0095.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.073] GetFileType (hFile=0x248) returned 0x1 [0095.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0095.073] GetFileType (hFile=0x248) returned 0x1 [0095.073] WriteFile (in: hFile=0x248, lpBuffer=0x270cf90*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x270cf90*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0095.075] CloseHandle (hObject=0x248) returned 1 [0095.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7d [0095.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0095.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.076] GetFileType (hFile=0x248) returned 0x1 [0095.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0095.076] GetFileType (hFile=0x248) returned 0x1 [0095.076] WriteFile (in: hFile=0x248, lpBuffer=0x2713c38*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2713c38*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0095.077] CloseHandle (hObject=0x248) returned 1 [0095.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\ENYBENY.TXT", lpFilePart=0x0) returned 0x45 [0095.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0095.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.078] GetFileType (hFile=0x248) returned 0x1 [0095.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0095.078] GetFileType (hFile=0x248) returned 0x1 [0095.079] WriteFile (in: hFile=0x248, lpBuffer=0x271e060*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x271e060*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0095.080] CloseHandle (hObject=0x248) returned 1 [0095.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\ENYBENY.png", lpFilePart=0x0) returned 0x45 [0095.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.081] GetFileType (hFile=0x248) returned 0x1 [0095.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0095.081] GetFileType (hFile=0x248) returned 0x1 [0095.081] WriteFile (in: hFile=0x248, lpBuffer=0x271f120*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x271f120*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0095.083] CloseHandle (hObject=0x248) returned 1 [0095.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x70 [0095.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0095.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.084] GetFileType (hFile=0x248) returned 0x1 [0095.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0095.084] GetFileType (hFile=0x248) returned 0x1 [0095.084] WriteFile (in: hFile=0x248, lpBuffer=0x2725d80*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2725d80*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0095.085] CloseHandle (hObject=0x248) returned 1 [0095.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0095.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", lpFilePart=0x0) returned 0x42 [0095.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0095.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0095.086] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0095.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0095.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0095.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", lpFilePart=0x0) returned 0x42 [0095.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0095.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0095.088] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0095.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0095.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0095.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", lpFilePart=0x0) returned 0x4f [0095.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.099] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0095.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", lpFilePart=0x0) returned 0x4f [0095.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.102] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.102] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.102] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0095.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", lpFilePart=0x0) returned 0x8b [0095.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.105] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.105] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.105] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.105] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0095.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", lpFilePart=0x0) returned 0x8b [0095.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.106] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.106] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.106] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.106] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0095.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0095.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0095.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0095.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0095.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x86 [0095.121] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.124] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0095.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x86 [0095.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.126] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.127] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.TXT", lpFilePart=0x0) returned 0x91 [0095.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.png", lpFilePart=0x0) returned 0x91 [0095.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0095.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbc [0095.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0095.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", lpFilePart=0x0) returned 0x59 [0095.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.145] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.145] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.170] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.170] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.170] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0095.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", lpFilePart=0x0) returned 0x59 [0095.182] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.226] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\ENYBENY.TXT", lpFilePart=0x0) returned 0x64 [0095.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\ENYBENY.png", lpFilePart=0x0) returned 0x64 [0095.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0095.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8f [0095.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5a [0095.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0095.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0095.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\ENYBENY.png", lpFilePart=0x0) returned 0x5a [0095.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0095.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0095.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x85 [0095.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0095.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0095.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4d [0095.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0095.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0095.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\ENYBENY.png", lpFilePart=0x0) returned 0x4d [0095.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0095.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x78 [0095.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0095.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0095.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x40 [0095.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0095.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0095.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\ENYBENY.png", lpFilePart=0x0) returned 0x40 [0095.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0095.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6b [0095.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0095.249] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0095.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3c [0095.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0095.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0095.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\ENYBENY.png", lpFilePart=0x0) returned 0x3c [0095.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0095.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x67 [0095.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0095.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0095.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0095.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0095.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", lpFilePart=0x0) returned 0x37 [0095.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0095.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0095.268] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0095.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0095.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0095.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0095.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", lpFilePart=0x0) returned 0x37 [0095.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0095.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0095.269] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0095.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0095.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\ENYBENY.TXT", lpFilePart=0x0) returned 0x42 [0095.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0095.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0095.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\ENYBENY.png", lpFilePart=0x0) returned 0x42 [0095.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0095.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6d [0095.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0095.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0095.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0095.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0095.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x33 [0095.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0095.276] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.277] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.277] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.277] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0095.277] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0095.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0095.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0095.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0095.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x33 [0095.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0600 [0095.278] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.278] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.278] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0095.278] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0095.278] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0095.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0095.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0095.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0095.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x3a [0095.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0095.279] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.279] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.279] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0095.279] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0095.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0095.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0095.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0095.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x3a [0095.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0600 [0095.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0095.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0095.280] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0095.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0095.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0095.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x44 [0095.281] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0095.284] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0095.285] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0095.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0095.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0095.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0095.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x44 [0095.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0600 [0095.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0095.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0095.291] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0095.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0095.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0095.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", lpFilePart=0x0) returned 0x5c [0095.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.295] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.295] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.295] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0095.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", lpFilePart=0x0) returned 0x5c [0095.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.296] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.296] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.296] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\ENYBENY.TXT", lpFilePart=0x0) returned 0x67 [0095.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0095.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0095.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\ENYBENY.png", lpFilePart=0x0) returned 0x67 [0095.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0095.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0095.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x92 [0095.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0095.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0095.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0095.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpFilePart=0x0) returned 0x4d [0095.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.302] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0095.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpFilePart=0x0) returned 0x4d [0095.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.303] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.303] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.303] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.303] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.303] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.303] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0095.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x55 [0095.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.304] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0095.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x55 [0095.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.304] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0095.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.313] WriteFile (in: hFile=0x248, lpBuffer=0x25fe468*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x25fe468*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0095.314] CloseHandle (hObject=0x248) returned 1 [0095.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0095.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.315] GetFileType (hFile=0x248) returned 0x1 [0095.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0095.315] GetFileType (hFile=0x248) returned 0x1 [0095.315] WriteFile (in: hFile=0x248, lpBuffer=0x25ff560*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x25ff560*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0095.317] CloseHandle (hObject=0x248) returned 1 [0095.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0095.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.319] GetFileType (hFile=0x248) returned 0x1 [0095.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.319] GetFileType (hFile=0x248) returned 0x1 [0095.319] WriteFile (in: hFile=0x248, lpBuffer=0x2606258*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2606258*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0095.320] CloseHandle (hObject=0x248) returned 1 [0095.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\ENYBENY.TXT", lpFilePart=0x0) returned 0x58 [0095.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0095.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.324] GetFileType (hFile=0x248) returned 0x1 [0095.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0095.325] GetFileType (hFile=0x248) returned 0x1 [0095.325] WriteFile (in: hFile=0x248, lpBuffer=0x26106d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x26106d0*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0095.326] CloseHandle (hObject=0x248) returned 1 [0095.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\ENYBENY.png", lpFilePart=0x0) returned 0x58 [0095.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0095.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.327] GetFileType (hFile=0x248) returned 0x1 [0095.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0095.327] GetFileType (hFile=0x248) returned 0x1 [0095.327] WriteFile (in: hFile=0x248, lpBuffer=0x26117b8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x26117b8*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0095.329] CloseHandle (hObject=0x248) returned 1 [0095.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x83 [0095.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0095.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.338] GetFileType (hFile=0x248) returned 0x1 [0095.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0095.338] GetFileType (hFile=0x248) returned 0x1 [0095.339] WriteFile (in: hFile=0x248, lpBuffer=0x2618480*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2618480*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0095.340] CloseHandle (hObject=0x248) returned 1 [0095.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0095.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpFilePart=0x0) returned 0x4c [0095.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.343] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.345] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.345] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.345] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.345] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.345] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.345] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.346] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.346] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.346] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.346] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.346] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.346] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.346] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.347] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.347] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.347] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.347] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.350] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.350] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.350] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.354] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.354] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.354] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.355] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.355] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0095.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0095.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpFilePart=0x0) returned 0x4c [0095.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0600 [0095.357] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.361] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.361] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.361] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.361] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.361] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.361] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.361] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.361] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.362] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.362] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.362] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.362] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.362] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.362] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.362] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.362] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.363] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.363] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0095.363] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0095.363] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0095.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0095.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x51 [0095.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", lpFilePart=0x0) returned 0x52 [0095.365] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.367] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x51 [0095.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", lpFilePart=0x0) returned 0x52 [0095.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.368] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.368] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.369] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5d [0095.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.370] GetFileType (hFile=0x248) returned 0x1 [0095.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.370] GetFileType (hFile=0x248) returned 0x1 [0095.371] WriteFile (in: hFile=0x248, lpBuffer=0x2635610*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2635610*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0095.372] CloseHandle (hObject=0x248) returned 1 [0095.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ENYBENY.png", lpFilePart=0x0) returned 0x5d [0095.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.385] GetFileType (hFile=0x248) returned 0x1 [0095.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0095.385] GetFileType (hFile=0x248) returned 0x1 [0095.385] WriteFile (in: hFile=0x248, lpBuffer=0x2636700*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2636700*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0095.386] CloseHandle (hObject=0x248) returned 1 [0095.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x88 [0095.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.388] GetFileType (hFile=0x248) returned 0x1 [0095.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.388] GetFileType (hFile=0x248) returned 0x1 [0095.388] WriteFile (in: hFile=0x248, lpBuffer=0x263d3f0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x263d3f0*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0095.389] CloseHandle (hObject=0x248) returned 1 [0095.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x68 [0095.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", lpFilePart=0x0) returned 0x69 [0095.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.391] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.392] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x68 [0095.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", lpFilePart=0x0) returned 0x69 [0095.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.395] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.396] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.396] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\ENYBENY.TXT", lpFilePart=0x0) returned 0x74 [0095.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.398] GetFileType (hFile=0x248) returned 0x1 [0095.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.398] GetFileType (hFile=0x248) returned 0x1 [0095.398] WriteFile (in: hFile=0x248, lpBuffer=0x264bb00*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x264bb00*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0095.399] CloseHandle (hObject=0x248) returned 1 [0095.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\ENYBENY.png", lpFilePart=0x0) returned 0x74 [0095.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0095.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.400] GetFileType (hFile=0x248) returned 0x1 [0095.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0095.400] GetFileType (hFile=0x248) returned 0x1 [0095.401] WriteFile (in: hFile=0x248, lpBuffer=0x264cc20*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x264cc20*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0095.402] CloseHandle (hObject=0x248) returned 1 [0095.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x9f [0095.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0095.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.403] GetFileType (hFile=0x248) returned 0x1 [0095.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0095.403] GetFileType (hFile=0x248) returned 0x1 [0095.403] WriteFile (in: hFile=0x248, lpBuffer=0x2653990*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2653990*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0095.404] CloseHandle (hObject=0x248) returned 1 [0095.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0095.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x5b [0095.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", lpFilePart=0x0) returned 0x5c [0095.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.410] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0095.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0095.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x5b [0095.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", lpFilePart=0x0) returned 0x5c [0095.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.412] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.413] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\ENYBENY.TXT", lpFilePart=0x0) returned 0x67 [0095.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\ENYBENY.png", lpFilePart=0x0) returned 0x67 [0095.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x92 [0095.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0095.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", lpFilePart=0x0) returned 0x5c [0095.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.428] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0095.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", lpFilePart=0x0) returned 0x5c [0095.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.430] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.431] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\ENYBENY.TXT", lpFilePart=0x0) returned 0x67 [0095.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\ENYBENY.png", lpFilePart=0x0) returned 0x67 [0095.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0095.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x92 [0095.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0095.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0095.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpFilePart=0x0) returned 0x57 [0095.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.451] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0095.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpFilePart=0x0) returned 0x57 [0095.452] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0600 [0095.453] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.453] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.453] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0095.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0095.454] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0095.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpFilePart=0x0) returned 0x78 [0095.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0095.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0095.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0095.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0095.458] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0095.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpFilePart=0x0) returned 0x78 [0095.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0095.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0095.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0095.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0095.458] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0095.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpFilePart=0x0) returned 0x7e [0095.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0095.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0095.462] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0095.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpFilePart=0x0) returned 0x7e [0095.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0095.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0095.464] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0095.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.EnyBenied", lpFilePart=0x0) returned 0x94 [0095.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0096.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0096.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0096.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x24c [0096.032] GetFileType (hFile=0x24c) returned 0x1 [0096.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0096.032] GetFileType (hFile=0x24c) returned 0x1 [0096.032] ReadFile (in: hFile=0x24c, lpBuffer=0x27d6228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27d6228*, lpNumberOfBytesRead=0x1ad988*=0xd2c, lpOverlapped=0x0) returned 1 [0096.115] ReadFile (in: hFile=0x24c, lpBuffer=0x27d5f3c, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27d5f3c*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0096.115] ReadFile (in: hFile=0x24c, lpBuffer=0x27d6228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27d6228*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0096.115] CloseHandle (hObject=0x24c) returned 1 [0096.116] WriteFile (in: hFile=0x248, lpBuffer=0x27d4730*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x27d4730*, lpNumberOfBytesWritten=0x1ad858*=0xd50, lpOverlapped=0x0) returned 1 [0096.116] CloseHandle (hObject=0x248) returned 1 [0096.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0096.117] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png")) returned 1 [0096.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.EnyBenied", lpFilePart=0x0) returned 0x93 [0096.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0096.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0096.120] GetFileType (hFile=0x248) returned 0x1 [0096.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0096.120] GetFileType (hFile=0x248) returned 0x1 [0096.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0096.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0096.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x24c [0096.654] GetFileType (hFile=0x24c) returned 0x1 [0096.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0096.654] GetFileType (hFile=0x24c) returned 0x1 [0096.654] ReadFile (in: hFile=0x24c, lpBuffer=0x271e4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x271e4f0*, lpNumberOfBytesRead=0x1ad988*=0xa0, lpOverlapped=0x0) returned 1 [0096.655] ReadFile (in: hFile=0x24c, lpBuffer=0x271e4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x271e4f0*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0096.655] CloseHandle (hObject=0x24c) returned 1 [0096.656] WriteFile (in: hFile=0x248, lpBuffer=0x271ca00*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x271ca00*, lpNumberOfBytesWritten=0x1ad858*=0xd0, lpOverlapped=0x0) returned 1 [0096.657] CloseHandle (hObject=0x248) returned 1 [0096.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0096.658] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png")) returned 1 [0096.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.EnyBenied", lpFilePart=0x0) returned 0x91 [0096.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0096.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0096.660] GetFileType (hFile=0x248) returned 0x1 [0096.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0096.660] GetFileType (hFile=0x248) returned 0x1 [0097.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0097.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0097.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x24c [0097.173] GetFileType (hFile=0x24c) returned 0x1 [0097.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.173] GetFileType (hFile=0x24c) returned 0x1 [0097.173] ReadFile (in: hFile=0x24c, lpBuffer=0x2665ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2665ae8*, lpNumberOfBytesRead=0x1ad988*=0x5c, lpOverlapped=0x0) returned 1 [0097.174] ReadFile (in: hFile=0x24c, lpBuffer=0x2665ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2665ae8*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0097.174] CloseHandle (hObject=0x24c) returned 1 [0097.174] WriteFile (in: hFile=0x248, lpBuffer=0x2664000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2664000*, lpNumberOfBytesWritten=0x1ad858*=0x80, lpOverlapped=0x0) returned 1 [0097.175] CloseHandle (hObject=0x248) returned 1 [0097.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0097.178] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html")) returned 1 [0097.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.EnyBenied", lpFilePart=0x0) returned 0x8f [0097.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0097.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.181] GetFileType (hFile=0x248) returned 0x1 [0097.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.181] GetFileType (hFile=0x248) returned 0x1 [0097.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0097.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0097.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x24c [0097.729] GetFileType (hFile=0x24c) returned 0x1 [0097.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.730] GetFileType (hFile=0x24c) returned 0x1 [0097.730] ReadFile (in: hFile=0x24c, lpBuffer=0x27ad000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27ad000*, lpNumberOfBytesRead=0x1ad988*=0x5f, lpOverlapped=0x0) returned 1 [0097.731] ReadFile (in: hFile=0x24c, lpBuffer=0x27ad000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27ad000*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0097.731] CloseHandle (hObject=0x24c) returned 1 [0097.731] WriteFile (in: hFile=0x248, lpBuffer=0x27ab520*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x27ab520*, lpNumberOfBytesWritten=0x1ad858*=0x80, lpOverlapped=0x0) returned 1 [0097.732] CloseHandle (hObject=0x248) returned 1 [0097.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0097.736] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js")) returned 1 [0097.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0097.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0097.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0097.737] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0097.739] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.740] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.740] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.740] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.740] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.740] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.740] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.740] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.744] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.744] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.744] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.744] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.744] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.744] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.745] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.745] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.745] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.745] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.745] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.745] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.745] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.746] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.746] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.746] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.746] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.746] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0097.746] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0097.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0097.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0097.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0097.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0097.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0097.749] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.749] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.749] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.749] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.749] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.749] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.749] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.749] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.752] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.753] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0097.754] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0097.754] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0097.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0097.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0097.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0097.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.756] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.756] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.757] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0097.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0097.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.758] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.758] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.762] GetFileType (hFile=0x248) returned 0x1 [0097.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.762] GetFileType (hFile=0x248) returned 0x1 [0097.762] WriteFile (in: hFile=0x248, lpBuffer=0x27ccea8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27ccea8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0097.763] CloseHandle (hObject=0x248) returned 1 [0097.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.764] GetFileType (hFile=0x248) returned 0x1 [0097.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.764] GetFileType (hFile=0x248) returned 0x1 [0097.764] WriteFile (in: hFile=0x248, lpBuffer=0x27ce008*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27ce008*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0097.766] CloseHandle (hObject=0x248) returned 1 [0097.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.777] GetFileType (hFile=0x248) returned 0x1 [0097.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.777] GetFileType (hFile=0x248) returned 0x1 [0097.777] WriteFile (in: hFile=0x248, lpBuffer=0x27d4e48*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27d4e48*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0097.778] CloseHandle (hObject=0x248) returned 1 [0097.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0097.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0097.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.778] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.778] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.779] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.779] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0097.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0097.780] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.780] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.780] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.781] GetFileType (hFile=0x248) returned 0x1 [0097.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.781] GetFileType (hFile=0x248) returned 0x1 [0097.782] WriteFile (in: hFile=0x248, lpBuffer=0x27e2978*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27e2978*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0097.783] CloseHandle (hObject=0x248) returned 1 [0097.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.784] GetFileType (hFile=0x248) returned 0x1 [0097.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.784] GetFileType (hFile=0x248) returned 0x1 [0097.784] WriteFile (in: hFile=0x248, lpBuffer=0x27e3ad8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27e3ad8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0097.785] CloseHandle (hObject=0x248) returned 1 [0097.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.788] GetFileType (hFile=0x248) returned 0x1 [0097.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.788] GetFileType (hFile=0x248) returned 0x1 [0097.788] WriteFile (in: hFile=0x248, lpBuffer=0x27ea918*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27ea918*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0097.789] CloseHandle (hObject=0x248) returned 1 [0097.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0097.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0097.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.791] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.791] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.791] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.791] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0097.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0097.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.792] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.792] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.792] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.792] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.793] GetFileType (hFile=0x248) returned 0x1 [0097.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.793] GetFileType (hFile=0x248) returned 0x1 [0097.794] WriteFile (in: hFile=0x248, lpBuffer=0x27f8448*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27f8448*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0097.795] CloseHandle (hObject=0x248) returned 1 [0097.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.795] GetFileType (hFile=0x248) returned 0x1 [0097.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.796] GetFileType (hFile=0x248) returned 0x1 [0097.796] WriteFile (in: hFile=0x248, lpBuffer=0x27f95a8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27f95a8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0097.797] CloseHandle (hObject=0x248) returned 1 [0097.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.805] GetFileType (hFile=0x248) returned 0x1 [0097.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.805] GetFileType (hFile=0x248) returned 0x1 [0097.806] WriteFile (in: hFile=0x248, lpBuffer=0x28003e8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x28003e8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0097.806] CloseHandle (hObject=0x248) returned 1 [0097.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0097.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0097.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.810] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.810] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.810] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.810] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0097.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0097.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.812] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.815] GetFileType (hFile=0x248) returned 0x1 [0097.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.815] GetFileType (hFile=0x248) returned 0x1 [0097.816] WriteFile (in: hFile=0x248, lpBuffer=0x2612580*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2612580*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0097.817] CloseHandle (hObject=0x248) returned 1 [0097.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.817] GetFileType (hFile=0x248) returned 0x1 [0097.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.817] GetFileType (hFile=0x248) returned 0x1 [0097.818] WriteFile (in: hFile=0x248, lpBuffer=0x26136e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26136e0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0097.819] CloseHandle (hObject=0x248) returned 1 [0097.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.821] WriteFile (in: hFile=0x248, lpBuffer=0x261a520*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261a520*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0097.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0097.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0097.823] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.824] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0097.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0097.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.825] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.825] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.825] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.825] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0097.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0097.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.843] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0097.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0097.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.844] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0097.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0097.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.852] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0097.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0097.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.853] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0097.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0097.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.882] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.883] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.883] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.883] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0097.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0097.883] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.884] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.884] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.884] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.884] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0097.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0097.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0097.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0097.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0097.907] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.909] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0097.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0097.909] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.910] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0097.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0097.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0097.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0097.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0097.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.923] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.923] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.923] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.924] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0097.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0097.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.924] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.925] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.925] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.925] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0097.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0097.932] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.933] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.933] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.933] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.933] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0097.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0097.933] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.934] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.934] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.934] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.934] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0097.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0097.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0097.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0097.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0097.970] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.971] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.971] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.971] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.971] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0097.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0097.972] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.972] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.972] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.972] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.972] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0097.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0097.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.980] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.981] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.981] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.981] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0097.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0097.981] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.981] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.982] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.982] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.982] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0097.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0097.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0097.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0097.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0097.990] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.991] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.991] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.991] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.992] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0097.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0097.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0097.992] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0097.992] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.992] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0097.993] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0097.993] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0097.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0097.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0097.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0097.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0097.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0097.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0097.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0097.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0097.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0097.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0097.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0097.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0098.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0098.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.252] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.252] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.252] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0098.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0098.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.252] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.253] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.253] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.253] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0098.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0098.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.261] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.262] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.262] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.262] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0098.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0098.263] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.263] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0098.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0098.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.292] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0098.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0098.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.293] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0098.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0098.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.303] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.303] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.303] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.304] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0098.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0098.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.304] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.307] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0098.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0098.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.311] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.311] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.311] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.311] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0098.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0098.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.312] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.312] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.312] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.312] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0098.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0098.347] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.351] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0098.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0098.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.352] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.352] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.352] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.352] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0098.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0098.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.363] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.363] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.363] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.363] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0098.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0098.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.363] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.364] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.364] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.364] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0098.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0098.375] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.376] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.376] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.376] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.376] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0098.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0098.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.377] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.377] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0098.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0098.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.383] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.383] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.383] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.383] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0098.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0098.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.384] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.384] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.384] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.384] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0098.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0098.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.391] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.391] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.391] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.391] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0098.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0098.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.392] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0098.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0098.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.407] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0098.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0098.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.408] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.408] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.408] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.408] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0098.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0098.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.433] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.433] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.433] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.433] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0098.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0098.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.433] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.433] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.433] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.433] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0098.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0098.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.446] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.446] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.446] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.447] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0098.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0098.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.447] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.447] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.447] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.447] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.454] GetFileType (hFile=0x248) returned 0x1 [0098.454] GetFileType (hFile=0x248) returned 0x1 [0098.454] WriteFile (in: hFile=0x248, lpBuffer=0x2605d08*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2605d08*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0098.456] CloseHandle (hObject=0x248) returned 1 [0098.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.468] GetFileType (hFile=0x248) returned 0x1 [0098.468] GetFileType (hFile=0x248) returned 0x1 [0098.468] WriteFile (in: hFile=0x248, lpBuffer=0x260cb48*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x260cb48*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0098.469] CloseHandle (hObject=0x248) returned 1 [0098.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0098.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0098.470] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.471] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.471] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.471] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.471] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0098.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0098.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.472] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.472] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.472] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.472] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.475] GetFileType (hFile=0x248) returned 0x1 [0098.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.475] GetFileType (hFile=0x248) returned 0x1 [0098.476] WriteFile (in: hFile=0x248, lpBuffer=0x261a678*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261a678*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0098.476] CloseHandle (hObject=0x248) returned 1 [0098.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.477] GetFileType (hFile=0x248) returned 0x1 [0098.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.477] GetFileType (hFile=0x248) returned 0x1 [0098.477] WriteFile (in: hFile=0x248, lpBuffer=0x261b7d8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x261b7d8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0098.478] CloseHandle (hObject=0x248) returned 1 [0098.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.488] GetFileType (hFile=0x248) returned 0x1 [0098.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.488] GetFileType (hFile=0x248) returned 0x1 [0098.488] WriteFile (in: hFile=0x248, lpBuffer=0x2622618*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2622618*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0098.489] CloseHandle (hObject=0x248) returned 1 [0098.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0098.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0098.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.490] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0098.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0098.491] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.491] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0098.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.493] GetFileType (hFile=0x248) returned 0x1 [0098.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.493] GetFileType (hFile=0x248) returned 0x1 [0098.494] WriteFile (in: hFile=0x248, lpBuffer=0x2630228*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2630228*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0098.495] CloseHandle (hObject=0x248) returned 1 [0098.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0098.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.496] GetFileType (hFile=0x248) returned 0x1 [0098.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.496] GetFileType (hFile=0x248) returned 0x1 [0098.496] WriteFile (in: hFile=0x248, lpBuffer=0x2631390*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2631390*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0098.497] CloseHandle (hObject=0x248) returned 1 [0098.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0098.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.515] GetFileType (hFile=0x248) returned 0x1 [0098.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.515] GetFileType (hFile=0x248) returned 0x1 [0098.515] WriteFile (in: hFile=0x248, lpBuffer=0x26381d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26381d8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0098.516] CloseHandle (hObject=0x248) returned 1 [0098.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0098.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0098.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.518] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0098.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0098.518] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.519] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0098.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.520] GetFileType (hFile=0x248) returned 0x1 [0098.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.520] GetFileType (hFile=0x248) returned 0x1 [0098.520] WriteFile (in: hFile=0x248, lpBuffer=0x2645de8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2645de8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0098.521] CloseHandle (hObject=0x248) returned 1 [0098.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0098.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.522] GetFileType (hFile=0x248) returned 0x1 [0098.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.522] GetFileType (hFile=0x248) returned 0x1 [0098.522] WriteFile (in: hFile=0x248, lpBuffer=0x2646f50*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2646f50*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0098.523] CloseHandle (hObject=0x248) returned 1 [0098.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0098.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.554] GetFileType (hFile=0x248) returned 0x1 [0098.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.555] GetFileType (hFile=0x248) returned 0x1 [0098.555] WriteFile (in: hFile=0x248, lpBuffer=0x264dd98*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264dd98*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0098.556] CloseHandle (hObject=0x248) returned 1 [0098.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0098.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0098.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.557] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.557] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.557] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.557] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0098.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0098.558] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.558] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.558] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.558] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.558] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.559] GetFileType (hFile=0x248) returned 0x1 [0098.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.559] GetFileType (hFile=0x248) returned 0x1 [0098.560] WriteFile (in: hFile=0x248, lpBuffer=0x265b8c8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265b8c8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0098.561] CloseHandle (hObject=0x248) returned 1 [0098.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.562] GetFileType (hFile=0x248) returned 0x1 [0098.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.562] GetFileType (hFile=0x248) returned 0x1 [0098.562] WriteFile (in: hFile=0x248, lpBuffer=0x265ca28*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x265ca28*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0098.563] CloseHandle (hObject=0x248) returned 1 [0098.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.628] GetFileType (hFile=0x248) returned 0x1 [0098.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.628] GetFileType (hFile=0x248) returned 0x1 [0098.629] WriteFile (in: hFile=0x248, lpBuffer=0x2663868*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2663868*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0098.630] CloseHandle (hObject=0x248) returned 1 [0098.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0098.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0098.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.631] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.632] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.632] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.632] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0098.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0098.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.633] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.633] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.633] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.633] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.634] GetFileType (hFile=0x248) returned 0x1 [0098.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.634] GetFileType (hFile=0x248) returned 0x1 [0098.635] WriteFile (in: hFile=0x248, lpBuffer=0x2671398*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2671398*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0098.636] CloseHandle (hObject=0x248) returned 1 [0098.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.637] GetFileType (hFile=0x248) returned 0x1 [0098.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.637] GetFileType (hFile=0x248) returned 0x1 [0098.637] WriteFile (in: hFile=0x248, lpBuffer=0x26724f8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26724f8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0098.639] CloseHandle (hObject=0x248) returned 1 [0098.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.656] GetFileType (hFile=0x248) returned 0x1 [0098.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.656] GetFileType (hFile=0x248) returned 0x1 [0098.656] WriteFile (in: hFile=0x248, lpBuffer=0x2679338*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2679338*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0098.657] CloseHandle (hObject=0x248) returned 1 [0098.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0098.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0098.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.658] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0098.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0098.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.659] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.659] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.659] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.659] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.660] GetFileType (hFile=0x248) returned 0x1 [0098.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.660] GetFileType (hFile=0x248) returned 0x1 [0098.661] WriteFile (in: hFile=0x248, lpBuffer=0x2686e68*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2686e68*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0098.662] CloseHandle (hObject=0x248) returned 1 [0098.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.663] GetFileType (hFile=0x248) returned 0x1 [0098.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.663] GetFileType (hFile=0x248) returned 0x1 [0098.663] WriteFile (in: hFile=0x248, lpBuffer=0x2687fc8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2687fc8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0098.664] CloseHandle (hObject=0x248) returned 1 [0098.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.667] GetFileType (hFile=0x248) returned 0x1 [0098.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.667] GetFileType (hFile=0x248) returned 0x1 [0098.667] WriteFile (in: hFile=0x248, lpBuffer=0x268ee08*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x268ee08*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0098.668] CloseHandle (hObject=0x248) returned 1 [0098.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0098.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0098.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.669] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0098.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0098.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.670] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.670] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.670] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.670] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.671] GetFileType (hFile=0x248) returned 0x1 [0098.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0098.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0098.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0098.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0098.688] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.688] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0098.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0098.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.689] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0098.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.713] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.713] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.713] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.713] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.714] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.714] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.728] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.728] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.728] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.729] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.729] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.729] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.730] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.730] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.730] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.741] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.742] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.758] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.759] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.759] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.760] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.760] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.760] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.760] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.787] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.787] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.787] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.787] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.788] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.788] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.788] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.788] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.788] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.804] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.804] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.805] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.805] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.807] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.807] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.808] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.808] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.816] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.816] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.816] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.817] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0098.817] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.817] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0098.817] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0098.818] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0098.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0098.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0098.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0098.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0098.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0098.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0098.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0098.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0098.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0098.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0098.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0098.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0098.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0098.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0098.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0098.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0098.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0098.849] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0098.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0098.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0098.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0098.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0098.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0098.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0098.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0098.850] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0098.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0098.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0098.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0098.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0098.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0098.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0098.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0098.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0098.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0098.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0098.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0098.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0098.862] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0098.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0098.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0098.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0098.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0098.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0098.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0098.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0098.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0098.884] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0098.884] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0098.884] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0098.884] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0098.884] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0098.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0098.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0098.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0098.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0098.885] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0098.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0098.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.889] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.889] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0098.889] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0098.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0098.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0098.890] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0098.891] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0098.891] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0098.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0098.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0098.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0098.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0098.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0099.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0099.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0099.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x24c [0099.480] GetFileType (hFile=0x24c) returned 0x1 [0099.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0099.480] GetFileType (hFile=0x24c) returned 0x1 [0099.480] ReadFile (in: hFile=0x24c, lpBuffer=0x26ee2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26ee2f8*, lpNumberOfBytesRead=0x1ad988*=0xc8d, lpOverlapped=0x0) returned 1 [0099.490] ReadFile (in: hFile=0x24c, lpBuffer=0x26edf6d, nNumberOfBytesToRead=0x373, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26edf6d*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0099.490] ReadFile (in: hFile=0x24c, lpBuffer=0x26ee2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26ee2f8*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0099.490] CloseHandle (hObject=0x24c) returned 1 [0099.491] WriteFile (in: hFile=0x248, lpBuffer=0x26ec800*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x26ec800*, lpNumberOfBytesWritten=0x1ad858*=0xcb0, lpOverlapped=0x0) returned 1 [0099.493] CloseHandle (hObject=0x248) returned 1 [0099.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0099.494] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png")) returned 1 [0099.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.EnyBenied", lpFilePart=0x0) returned 0x93 [0099.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0099.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0099.496] GetFileType (hFile=0x248) returned 0x1 [0099.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0099.497] GetFileType (hFile=0x248) returned 0x1 [0100.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0100.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0100.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0100.207] GetFileType (hFile=0x240) returned 0x1 [0100.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0100.207] GetFileType (hFile=0x240) returned 0x1 [0100.207] ReadFile (in: hFile=0x240, lpBuffer=0x2619848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2619848*, lpNumberOfBytesRead=0x1ad988*=0x8f, lpOverlapped=0x0) returned 1 [0100.209] ReadFile (in: hFile=0x240, lpBuffer=0x2619848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2619848*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0100.209] CloseHandle (hObject=0x240) returned 1 [0100.209] WriteFile (in: hFile=0x248, lpBuffer=0x2617d58*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2617d58*, lpNumberOfBytesWritten=0x1ad858*=0xb0, lpOverlapped=0x0) returned 1 [0100.210] CloseHandle (hObject=0x248) returned 1 [0100.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0100.211] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png")) returned 1 [0100.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.EnyBenied", lpFilePart=0x0) returned 0x91 [0100.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0100.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0100.213] GetFileType (hFile=0x248) returned 0x1 [0100.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0100.213] GetFileType (hFile=0x248) returned 0x1 [0100.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0100.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0100.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0100.603] GetFileType (hFile=0x240) returned 0x1 [0100.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0100.603] GetFileType (hFile=0x240) returned 0x1 [0100.603] ReadFile (in: hFile=0x240, lpBuffer=0x2760d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2760d68*, lpNumberOfBytesRead=0x1ad988*=0x5c, lpOverlapped=0x0) returned 1 [0100.604] ReadFile (in: hFile=0x240, lpBuffer=0x2760d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2760d68*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0100.604] CloseHandle (hObject=0x240) returned 1 [0100.605] WriteFile (in: hFile=0x248, lpBuffer=0x275f280*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x275f280*, lpNumberOfBytesWritten=0x1ad858*=0x80, lpOverlapped=0x0) returned 1 [0100.605] CloseHandle (hObject=0x248) returned 1 [0100.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0100.607] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html")) returned 1 [0100.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.EnyBenied", lpFilePart=0x0) returned 0x8f [0100.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0100.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0100.609] GetFileType (hFile=0x248) returned 0x1 [0100.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0100.609] GetFileType (hFile=0x248) returned 0x1 [0101.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0101.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0101.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0101.070] GetFileType (hFile=0x240) returned 0x1 [0101.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.070] GetFileType (hFile=0x240) returned 0x1 [0101.070] ReadFile (in: hFile=0x240, lpBuffer=0x26a8308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26a8308*, lpNumberOfBytesRead=0x1ad988*=0x5b, lpOverlapped=0x0) returned 1 [0101.071] ReadFile (in: hFile=0x240, lpBuffer=0x26a8308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26a8308*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0101.071] CloseHandle (hObject=0x240) returned 1 [0101.071] WriteFile (in: hFile=0x248, lpBuffer=0x26a6828*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x26a6828*, lpNumberOfBytesWritten=0x1ad858*=0x80, lpOverlapped=0x0) returned 1 [0101.072] CloseHandle (hObject=0x248) returned 1 [0101.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0101.073] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js")) returned 1 [0101.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0101.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0101.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0101.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0101.076] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.077] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.077] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.077] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.077] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.077] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.077] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.077] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.078] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.082] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.082] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.082] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.082] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0101.082] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0101.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0101.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0101.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0101.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0101.083] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0101.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.089] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0101.089] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0101.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0101.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0101.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0101.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.090] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.091] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.091] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.091] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0101.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0101.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.091] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.091] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.092] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.092] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.093] GetFileType (hFile=0x248) returned 0x1 [0101.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.093] GetFileType (hFile=0x248) returned 0x1 [0101.093] WriteFile (in: hFile=0x248, lpBuffer=0x26c81b0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26c81b0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.094] CloseHandle (hObject=0x248) returned 1 [0101.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.095] GetFileType (hFile=0x248) returned 0x1 [0101.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.095] GetFileType (hFile=0x248) returned 0x1 [0101.095] WriteFile (in: hFile=0x248, lpBuffer=0x26c9310*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26c9310*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.096] CloseHandle (hObject=0x248) returned 1 [0101.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.098] GetFileType (hFile=0x248) returned 0x1 [0101.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.098] GetFileType (hFile=0x248) returned 0x1 [0101.098] WriteFile (in: hFile=0x248, lpBuffer=0x26d0150*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26d0150*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.099] CloseHandle (hObject=0x248) returned 1 [0101.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0101.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0101.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.100] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0101.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0101.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.101] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.101] GetFileType (hFile=0x248) returned 0x1 [0101.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.102] GetFileType (hFile=0x248) returned 0x1 [0101.102] WriteFile (in: hFile=0x248, lpBuffer=0x26ddc80*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26ddc80*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.102] CloseHandle (hObject=0x248) returned 1 [0101.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.103] GetFileType (hFile=0x248) returned 0x1 [0101.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.103] GetFileType (hFile=0x248) returned 0x1 [0101.103] WriteFile (in: hFile=0x248, lpBuffer=0x26dede0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26dede0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.105] CloseHandle (hObject=0x248) returned 1 [0101.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.107] GetFileType (hFile=0x248) returned 0x1 [0101.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.107] GetFileType (hFile=0x248) returned 0x1 [0101.107] WriteFile (in: hFile=0x248, lpBuffer=0x26e5c20*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26e5c20*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.108] CloseHandle (hObject=0x248) returned 1 [0101.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0101.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0101.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.111] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.112] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.112] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.112] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0101.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0101.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.112] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.112] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.113] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.113] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.115] GetFileType (hFile=0x248) returned 0x1 [0101.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.115] GetFileType (hFile=0x248) returned 0x1 [0101.115] WriteFile (in: hFile=0x248, lpBuffer=0x26f3750*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26f3750*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.116] CloseHandle (hObject=0x248) returned 1 [0101.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.117] GetFileType (hFile=0x248) returned 0x1 [0101.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.117] GetFileType (hFile=0x248) returned 0x1 [0101.117] WriteFile (in: hFile=0x248, lpBuffer=0x26f48b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26f48b0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.118] CloseHandle (hObject=0x248) returned 1 [0101.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.159] GetFileType (hFile=0x248) returned 0x1 [0101.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.159] GetFileType (hFile=0x248) returned 0x1 [0101.159] WriteFile (in: hFile=0x248, lpBuffer=0x26fb6f0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26fb6f0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.160] CloseHandle (hObject=0x248) returned 1 [0101.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0101.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0101.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.162] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0101.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0101.162] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.163] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.163] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.163] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.193] GetFileType (hFile=0x248) returned 0x1 [0101.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.193] GetFileType (hFile=0x248) returned 0x1 [0101.193] WriteFile (in: hFile=0x248, lpBuffer=0x2709220*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2709220*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.194] CloseHandle (hObject=0x248) returned 1 [0101.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.195] GetFileType (hFile=0x248) returned 0x1 [0101.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.195] GetFileType (hFile=0x248) returned 0x1 [0101.195] WriteFile (in: hFile=0x248, lpBuffer=0x270a380*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x270a380*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.206] CloseHandle (hObject=0x248) returned 1 [0101.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0101.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0101.220] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.221] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.222] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.222] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.222] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0101.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0101.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.222] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.222] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.223] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.223] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0101.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0101.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.239] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.239] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.239] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.239] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0101.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0101.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.240] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0101.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0101.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.253] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.253] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.253] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.254] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0101.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0101.254] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.254] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.254] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.254] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.254] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0101.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0101.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.267] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.267] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.267] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.267] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0101.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0101.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.268] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0101.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0101.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0101.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0101.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0101.284] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.285] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0101.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0101.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.286] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.286] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.286] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.286] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0101.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0101.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0101.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0101.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0101.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.301] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0101.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0101.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.302] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0101.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0101.317] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.317] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.317] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0101.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0101.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.318] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0101.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0101.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0101.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0101.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0101.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.327] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0101.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0101.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.327] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0101.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0101.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.339] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0101.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0101.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.340] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0101.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0101.354] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.355] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.355] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.355] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.355] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0101.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0101.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.356] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.356] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.356] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.356] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0101.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0101.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0101.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0101.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0101.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.364] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.364] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.364] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.364] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0101.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0101.365] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.365] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0101.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0101.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.380] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.380] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.380] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.380] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0101.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0101.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.380] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.380] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.381] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.381] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0101.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0101.388] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.388] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0101.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0101.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.389] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0101.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0101.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.401] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.401] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.401] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.401] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0101.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0101.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.402] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.402] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.402] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.402] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0101.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0101.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.409] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.410] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0101.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0101.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.410] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0101.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0101.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.425] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.425] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.425] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.425] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0101.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0101.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.426] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.426] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.426] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.426] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0101.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0101.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.440] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.440] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.440] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.440] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0101.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0101.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.441] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0101.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0101.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.449] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.449] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.449] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.449] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0101.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0101.450] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.450] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.450] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.450] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.450] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0101.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0101.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.458] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0101.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0101.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.459] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0101.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0101.477] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.478] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.478] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.478] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.478] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0101.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0101.479] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.479] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.479] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.479] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.479] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0101.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0101.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.488] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.489] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0101.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0101.489] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.489] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0101.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0101.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.503] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.503] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.503] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.503] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0101.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0101.504] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.504] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.504] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.504] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.504] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0101.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0101.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.517] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0101.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0101.517] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.518] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0101.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0101.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.538] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0101.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0101.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.538] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0101.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0101.548] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.549] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0101.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0101.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.549] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0101.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0101.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0101.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0101.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0101.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.557] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0101.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0101.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.557] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0101.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0101.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0101.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0101.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0101.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.570] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0101.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0101.571] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.571] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0101.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0101.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.584] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0101.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0101.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.585] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0101.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0101.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.592] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0101.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0101.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.592] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0101.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0101.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.599] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0101.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0101.600] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.600] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0101.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0101.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.616] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0101.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0101.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.617] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.625] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.625] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.632] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.633] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.634] GetFileType (hFile=0x248) returned 0x1 [0101.635] GetFileType (hFile=0x248) returned 0x1 [0101.635] WriteFile (in: hFile=0x248, lpBuffer=0x27d92d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27d92d0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.636] CloseHandle (hObject=0x248) returned 1 [0101.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.638] GetFileType (hFile=0x248) returned 0x1 [0101.638] GetFileType (hFile=0x248) returned 0x1 [0101.638] WriteFile (in: hFile=0x248, lpBuffer=0x27da430*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27da430*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.639] CloseHandle (hObject=0x248) returned 1 [0101.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.642] GetFileType (hFile=0x248) returned 0x1 [0101.642] GetFileType (hFile=0x248) returned 0x1 [0101.642] WriteFile (in: hFile=0x248, lpBuffer=0x27e1270*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27e1270*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.643] CloseHandle (hObject=0x248) returned 1 [0101.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.646] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.647] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.648] GetFileType (hFile=0x248) returned 0x1 [0101.648] GetFileType (hFile=0x248) returned 0x1 [0101.649] WriteFile (in: hFile=0x248, lpBuffer=0x27eeda0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27eeda0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.650] CloseHandle (hObject=0x248) returned 1 [0101.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.651] GetFileType (hFile=0x248) returned 0x1 [0101.651] GetFileType (hFile=0x248) returned 0x1 [0101.651] WriteFile (in: hFile=0x248, lpBuffer=0x27eff00*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27eff00*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.653] CloseHandle (hObject=0x248) returned 1 [0101.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.656] GetFileType (hFile=0x248) returned 0x1 [0101.656] GetFileType (hFile=0x248) returned 0x1 [0101.659] WriteFile (in: hFile=0x248, lpBuffer=0x25f5b90*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x25f5b90*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.660] CloseHandle (hObject=0x248) returned 1 [0101.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0101.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0101.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.662] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0101.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0101.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.663] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.667] GetFileType (hFile=0x248) returned 0x1 [0101.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.667] GetFileType (hFile=0x248) returned 0x1 [0101.667] WriteFile (in: hFile=0x248, lpBuffer=0x26036c0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26036c0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.668] CloseHandle (hObject=0x248) returned 1 [0101.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.669] GetFileType (hFile=0x248) returned 0x1 [0101.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.669] GetFileType (hFile=0x248) returned 0x1 [0101.669] WriteFile (in: hFile=0x248, lpBuffer=0x2604820*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2604820*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.671] CloseHandle (hObject=0x248) returned 1 [0101.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.674] GetFileType (hFile=0x248) returned 0x1 [0101.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.674] GetFileType (hFile=0x248) returned 0x1 [0101.674] WriteFile (in: hFile=0x248, lpBuffer=0x260b660*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x260b660*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.675] CloseHandle (hObject=0x248) returned 1 [0101.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0101.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0101.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.676] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.677] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0101.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0101.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.678] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0101.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.681] GetFileType (hFile=0x248) returned 0x1 [0101.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.681] GetFileType (hFile=0x248) returned 0x1 [0101.682] WriteFile (in: hFile=0x248, lpBuffer=0x2619190*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2619190*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.683] CloseHandle (hObject=0x248) returned 1 [0101.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0101.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.684] GetFileType (hFile=0x248) returned 0x1 [0101.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.684] GetFileType (hFile=0x248) returned 0x1 [0101.684] WriteFile (in: hFile=0x248, lpBuffer=0x261a2f0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x261a2f0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.685] CloseHandle (hObject=0x248) returned 1 [0101.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0101.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.695] GetFileType (hFile=0x248) returned 0x1 [0101.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.695] GetFileType (hFile=0x248) returned 0x1 [0101.695] WriteFile (in: hFile=0x248, lpBuffer=0x2621130*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2621130*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.696] CloseHandle (hObject=0x248) returned 1 [0101.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0101.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0101.697] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.697] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.697] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.697] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.698] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0101.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0101.698] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.698] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.698] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.698] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.698] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0101.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.699] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.699] GetFileType (hFile=0x248) returned 0x1 [0101.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.699] GetFileType (hFile=0x248) returned 0x1 [0101.700] WriteFile (in: hFile=0x248, lpBuffer=0x262ed40*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x262ed40*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.700] CloseHandle (hObject=0x248) returned 1 [0101.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0101.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.701] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.701] GetFileType (hFile=0x248) returned 0x1 [0101.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.701] GetFileType (hFile=0x248) returned 0x1 [0101.701] WriteFile (in: hFile=0x248, lpBuffer=0x262fea8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x262fea8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.702] CloseHandle (hObject=0x248) returned 1 [0101.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0101.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.703] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.706] GetFileType (hFile=0x248) returned 0x1 [0101.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.706] GetFileType (hFile=0x248) returned 0x1 [0101.706] WriteFile (in: hFile=0x248, lpBuffer=0x2636cf0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2636cf0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.707] CloseHandle (hObject=0x248) returned 1 [0101.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0101.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0101.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.708] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.708] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.708] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.708] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0101.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0101.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0101.709] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.709] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0101.709] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0101.709] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0101.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0101.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0101.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.710] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.710] GetFileType (hFile=0x248) returned 0x1 [0101.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.710] GetFileType (hFile=0x248) returned 0x1 [0101.711] WriteFile (in: hFile=0x248, lpBuffer=0x2644900*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2644900*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0101.712] CloseHandle (hObject=0x248) returned 1 [0101.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0101.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0101.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.713] GetFileType (hFile=0x248) returned 0x1 [0101.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0101.713] GetFileType (hFile=0x248) returned 0x1 [0101.713] WriteFile (in: hFile=0x248, lpBuffer=0x2645a68*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2645a68*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0101.714] CloseHandle (hObject=0x248) returned 1 [0101.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0101.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0101.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.729] GetFileType (hFile=0x248) returned 0x1 [0101.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0101.729] GetFileType (hFile=0x248) returned 0x1 [0101.729] WriteFile (in: hFile=0x248, lpBuffer=0x264c8b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264c8b0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0101.731] CloseHandle (hObject=0x248) returned 1 [0101.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ENYBENY.TXT", lpFilePart=0x0) returned 0x92 [0101.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0101.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.731] GetFileType (hFile=0x248) returned 0x1 [0101.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0101.731] GetFileType (hFile=0x248) returned 0x1 [0101.732] WriteFile (in: hFile=0x248, lpBuffer=0x2656e08*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2656e08*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0101.733] CloseHandle (hObject=0x248) returned 1 [0101.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ENYBENY.png", lpFilePart=0x0) returned 0x92 [0101.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0101.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.734] GetFileType (hFile=0x248) returned 0x1 [0101.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0101.734] GetFileType (hFile=0x248) returned 0x1 [0101.734] WriteFile (in: hFile=0x248, lpBuffer=0x2657f60*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x2657f60*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0101.735] CloseHandle (hObject=0x248) returned 1 [0101.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbd [0101.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0101.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.740] GetFileType (hFile=0x248) returned 0x1 [0101.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0101.740] GetFileType (hFile=0x248) returned 0x1 [0101.740] WriteFile (in: hFile=0x248, lpBuffer=0x265ed88*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x265ed88*, lpNumberOfBytesWritten=0x1ad818*=0xc6, lpOverlapped=0x0) returned 1 [0101.741] CloseHandle (hObject=0x248) returned 1 [0101.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0101.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x87 [0101.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0101.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0101.741] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0101.742] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0101.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0101.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0101.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x87 [0101.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0101.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0101.742] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0101.743] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0101.743] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0101.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0101.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ENYBENY.TXT", lpFilePart=0x0) returned 0x93 [0101.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0101.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.754] GetFileType (hFile=0x248) returned 0x1 [0101.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0101.754] GetFileType (hFile=0x248) returned 0x1 [0101.754] WriteFile (in: hFile=0x248, lpBuffer=0x266d008*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x266d008*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0101.755] CloseHandle (hObject=0x248) returned 1 [0101.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ENYBENY.png", lpFilePart=0x0) returned 0x93 [0101.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0101.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.756] GetFileType (hFile=0x248) returned 0x1 [0101.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0101.756] GetFileType (hFile=0x248) returned 0x1 [0101.756] WriteFile (in: hFile=0x248, lpBuffer=0x266e160*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x266e160*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0101.757] CloseHandle (hObject=0x248) returned 1 [0101.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbe [0101.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0101.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0101.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x89 [0101.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0101.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0101.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ENYBENY.png", lpFilePart=0x0) returned 0x89 [0101.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0101.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0101.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xb4 [0101.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0101.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0101.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\ENYBENY.TXT", lpFilePart=0x0) returned 0x83 [0101.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0101.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0101.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\ENYBENY.png", lpFilePart=0x0) returned 0x83 [0101.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0101.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0101.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xae [0101.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0101.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0101.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0101.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0101.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpFilePart=0x0) returned 0x77 [0101.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpFilePart=0x0) returned 0x78 [0101.777] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0101.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0101.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0101.777] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0101.777] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0101.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0101.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0101.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpFilePart=0x0) returned 0x77 [0101.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpFilePart=0x0) returned 0x78 [0101.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0101.778] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0101.778] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0101.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0101.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0101.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpFilePart=0x0) returned 0x7e [0101.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpFilePart=0x0) returned 0x7f [0101.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0101.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.781] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0101.782] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0101.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0101.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0101.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpFilePart=0x0) returned 0x7e [0101.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpFilePart=0x0) returned 0x7f [0101.783] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0101.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.785] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.785] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0101.785] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0101.785] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0101.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0101.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0101.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.EnyBenied", lpFilePart=0x0) returned 0x90 [0101.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0101.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0101.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0102.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0102.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0102.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0102.260] GetFileType (hFile=0x240) returned 0x1 [0102.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0102.260] GetFileType (hFile=0x240) returned 0x1 [0102.260] ReadFile (in: hFile=0x240, lpBuffer=0x27e8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27e8ca8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0102.386] WriteFile (in: hFile=0x248, lpBuffer=0x27e71c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x27e71c8*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0102.387] ReadFile (in: hFile=0x240, lpBuffer=0x27e8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27e8ca8*, lpNumberOfBytesRead=0x1ad988*=0xa33, lpOverlapped=0x0) returned 1 [0102.489] ReadFile (in: hFile=0x240, lpBuffer=0x27e8ac3, nNumberOfBytesToRead=0x1cd, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27e8ac3*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0102.489] ReadFile (in: hFile=0x240, lpBuffer=0x27e8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27e8ca8*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0102.489] CloseHandle (hObject=0x240) returned 1 [0102.490] WriteFile (in: hFile=0x248, lpBuffer=0x27e71c8*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x27e71c8*, lpNumberOfBytesWritten=0x1ad858*=0xa60, lpOverlapped=0x0) returned 1 [0102.490] CloseHandle (hObject=0x248) returned 1 [0103.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0103.089] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png")) returned 1 [0103.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0103.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpFilePart=0x0) returned 0x87 [0103.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpFilePart=0x0) returned 0x88 [0103.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0103.094] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.094] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.094] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.094] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.094] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.094] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.097] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.097] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.097] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.097] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.097] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.097] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0103.108] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0103.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0103.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0103.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpFilePart=0x0) returned 0x87 [0103.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpFilePart=0x0) returned 0x88 [0103.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0103.111] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.111] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.111] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.111] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.111] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.111] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.112] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.115] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.115] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.115] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.115] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.118] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.119] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0103.121] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0103.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0103.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x8a [0103.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8b [0103.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.123] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x8a [0103.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8b [0103.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.125] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.129] GetFileType (hFile=0x248) returned 0x1 [0103.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.129] GetFileType (hFile=0x248) returned 0x1 [0103.129] WriteFile (in: hFile=0x248, lpBuffer=0x260d3d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x260d3d0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.130] CloseHandle (hObject=0x248) returned 1 [0103.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.131] GetFileType (hFile=0x248) returned 0x1 [0103.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.131] GetFileType (hFile=0x248) returned 0x1 [0103.131] WriteFile (in: hFile=0x248, lpBuffer=0x260e530*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x260e530*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.142] CloseHandle (hObject=0x248) returned 1 [0103.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.146] GetFileType (hFile=0x248) returned 0x1 [0103.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.146] GetFileType (hFile=0x248) returned 0x1 [0103.146] WriteFile (in: hFile=0x248, lpBuffer=0x2615370*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2615370*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.147] CloseHandle (hObject=0x248) returned 1 [0103.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x8a [0103.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8b [0103.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.149] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.149] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.149] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.149] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x8a [0103.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8b [0103.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.150] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.151] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.151] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.152] GetFileType (hFile=0x248) returned 0x1 [0103.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.152] GetFileType (hFile=0x248) returned 0x1 [0103.152] WriteFile (in: hFile=0x248, lpBuffer=0x2622f30*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2622f30*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.154] CloseHandle (hObject=0x248) returned 1 [0103.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.155] GetFileType (hFile=0x248) returned 0x1 [0103.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.155] GetFileType (hFile=0x248) returned 0x1 [0103.155] WriteFile (in: hFile=0x248, lpBuffer=0x2624090*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2624090*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.157] CloseHandle (hObject=0x248) returned 1 [0103.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.187] GetFileType (hFile=0x248) returned 0x1 [0103.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.187] GetFileType (hFile=0x248) returned 0x1 [0103.187] WriteFile (in: hFile=0x248, lpBuffer=0x262aed0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x262aed0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.188] CloseHandle (hObject=0x248) returned 1 [0103.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x8a [0103.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8b [0103.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.190] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x8a [0103.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8b [0103.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.192] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.193] GetFileType (hFile=0x248) returned 0x1 [0103.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.193] GetFileType (hFile=0x248) returned 0x1 [0103.193] WriteFile (in: hFile=0x248, lpBuffer=0x2638a90*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2638a90*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.195] CloseHandle (hObject=0x248) returned 1 [0103.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.196] GetFileType (hFile=0x248) returned 0x1 [0103.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.196] GetFileType (hFile=0x248) returned 0x1 [0103.196] WriteFile (in: hFile=0x248, lpBuffer=0x2639bf0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2639bf0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.199] CloseHandle (hObject=0x248) returned 1 [0103.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.220] GetFileType (hFile=0x248) returned 0x1 [0103.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.220] GetFileType (hFile=0x248) returned 0x1 [0103.220] WriteFile (in: hFile=0x248, lpBuffer=0x2640a30*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2640a30*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.221] CloseHandle (hObject=0x248) returned 1 [0103.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x8a [0103.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8b [0103.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.223] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.223] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.223] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.223] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x8a [0103.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8b [0103.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.224] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.224] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.224] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.224] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.225] GetFileType (hFile=0x248) returned 0x1 [0103.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.226] GetFileType (hFile=0x248) returned 0x1 [0103.226] WriteFile (in: hFile=0x248, lpBuffer=0x264e5f0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264e5f0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.227] CloseHandle (hObject=0x248) returned 1 [0103.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpFilePart=0x0) returned 0x8a [0103.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8b [0103.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.251] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpFilePart=0x0) returned 0x8a [0103.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8b [0103.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.252] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.252] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.252] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.252] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpFilePart=0x0) returned 0x8a [0103.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8b [0103.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.267] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.267] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.267] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.267] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpFilePart=0x0) returned 0x8a [0103.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8b [0103.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.268] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpFilePart=0x0) returned 0x8a [0103.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8b [0103.284] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.284] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.284] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.284] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.284] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpFilePart=0x0) returned 0x8a [0103.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8b [0103.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.285] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8d [0103.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8e [0103.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.295] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.295] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.295] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8d [0103.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8e [0103.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.295] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.295] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.295] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.295] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0103.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0103.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0103.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8d [0103.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8e [0103.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.304] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.305] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.305] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8d [0103.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8e [0103.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.305] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.305] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.305] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.305] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0103.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0103.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0103.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpFilePart=0x0) returned 0x8a [0103.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8b [0103.325] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.328] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.328] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.328] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.328] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpFilePart=0x0) returned 0x8a [0103.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8b [0103.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.329] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.329] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.329] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.329] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8e [0103.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8f [0103.335] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.335] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8e [0103.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8f [0103.335] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.336] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.336] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.336] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.336] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9a [0103.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\ENYBENY.png", lpFilePart=0x0) returned 0x9a [0103.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc5 [0103.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpFilePart=0x0) returned 0x8a [0103.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8b [0103.342] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.343] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.343] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.343] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.343] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpFilePart=0x0) returned 0x8a [0103.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8b [0103.344] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.344] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.344] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", lpFilePart=0x0) returned 0x8a [0103.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8b [0103.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.350] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.350] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.350] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.351] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", lpFilePart=0x0) returned 0x8a [0103.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8b [0103.351] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.351] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x8a [0103.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8b [0103.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.359] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x8a [0103.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8b [0103.360] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.360] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8b [0103.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8c [0103.369] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.369] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8b [0103.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8c [0103.369] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.370] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0103.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0103.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0103.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x8a [0103.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8b [0103.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.378] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x8a [0103.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8b [0103.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.379] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", lpFilePart=0x0) returned 0x8a [0103.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8b [0103.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.386] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.386] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.386] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.386] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", lpFilePart=0x0) returned 0x8a [0103.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8b [0103.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.387] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.387] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.387] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.387] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x8a [0103.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8b [0103.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.397] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.397] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.398] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.398] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x8a [0103.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8b [0103.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.398] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.398] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.398] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.398] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x8a [0103.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8b [0103.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.406] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.406] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.406] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.406] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x8a [0103.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8b [0103.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.407] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x8a [0103.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8b [0103.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.427] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.427] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.427] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.427] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x8a [0103.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8b [0103.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.428] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.428] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", lpFilePart=0x0) returned 0x8a [0103.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8b [0103.434] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.434] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", lpFilePart=0x0) returned 0x8a [0103.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8b [0103.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.435] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", lpFilePart=0x0) returned 0x8a [0103.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8b [0103.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.442] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.442] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.442] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.442] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", lpFilePart=0x0) returned 0x8a [0103.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8b [0103.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.442] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.443] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.443] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.443] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x8a [0103.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8b [0103.454] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.454] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.454] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x8a [0103.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8b [0103.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.455] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.455] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.455] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.455] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x8a [0103.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8b [0103.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.468] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.468] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.468] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.468] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x8a [0103.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8b [0103.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.469] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.469] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.469] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.469] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.474] WriteFile (in: hFile=0x248, lpBuffer=0x2604018*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2604018*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.475] CloseHandle (hObject=0x248) returned 1 [0103.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.475] GetFileType (hFile=0x248) returned 0x1 [0103.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.476] GetFileType (hFile=0x248) returned 0x1 [0103.476] WriteFile (in: hFile=0x248, lpBuffer=0x2605178*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2605178*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.477] CloseHandle (hObject=0x248) returned 1 [0103.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.488] GetFileType (hFile=0x248) returned 0x1 [0103.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.488] GetFileType (hFile=0x248) returned 0x1 [0103.488] WriteFile (in: hFile=0x248, lpBuffer=0x260bfb8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x260bfb8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.489] CloseHandle (hObject=0x248) returned 1 [0103.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x8a [0103.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8b [0103.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.491] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x8a [0103.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8b [0103.492] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.492] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.492] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.492] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.493] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.496] GetFileType (hFile=0x248) returned 0x1 [0103.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.496] GetFileType (hFile=0x248) returned 0x1 [0103.497] WriteFile (in: hFile=0x248, lpBuffer=0x2619b78*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2619b78*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.498] CloseHandle (hObject=0x248) returned 1 [0103.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0103.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.499] GetFileType (hFile=0x248) returned 0x1 [0103.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0103.499] GetFileType (hFile=0x248) returned 0x1 [0103.499] WriteFile (in: hFile=0x248, lpBuffer=0x261acd8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x261acd8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.501] CloseHandle (hObject=0x248) returned 1 [0103.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.507] GetFileType (hFile=0x248) returned 0x1 [0103.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.507] GetFileType (hFile=0x248) returned 0x1 [0103.507] WriteFile (in: hFile=0x248, lpBuffer=0x2621b18*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2621b18*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.508] CloseHandle (hObject=0x248) returned 1 [0103.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x8a [0103.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8b [0103.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.510] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0103.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x8a [0103.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8b [0103.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.511] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0103.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0103.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.512] GetFileType (hFile=0x248) returned 0x1 [0103.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0103.512] GetFileType (hFile=0x248) returned 0x1 [0103.512] WriteFile (in: hFile=0x248, lpBuffer=0x262f6d8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x262f6d8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.513] CloseHandle (hObject=0x248) returned 1 [0103.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.514] GetFileType (hFile=0x248) returned 0x1 [0103.514] GetFileType (hFile=0x248) returned 0x1 [0103.514] WriteFile (in: hFile=0x248, lpBuffer=0x2630838*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2630838*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.515] CloseHandle (hObject=0x248) returned 1 [0103.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.526] GetFileType (hFile=0x248) returned 0x1 [0103.526] GetFileType (hFile=0x248) returned 0x1 [0103.526] WriteFile (in: hFile=0x248, lpBuffer=0x2637678*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2637678*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.527] CloseHandle (hObject=0x248) returned 1 [0103.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x8a [0103.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8b [0103.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.529] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.529] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.529] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x8a [0103.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8b [0103.529] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.530] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.530] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.530] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.530] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.531] GetFileType (hFile=0x248) returned 0x1 [0103.531] GetFileType (hFile=0x248) returned 0x1 [0103.532] WriteFile (in: hFile=0x248, lpBuffer=0x2645238*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2645238*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.533] CloseHandle (hObject=0x248) returned 1 [0103.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.534] GetFileType (hFile=0x248) returned 0x1 [0103.534] GetFileType (hFile=0x248) returned 0x1 [0103.534] WriteFile (in: hFile=0x248, lpBuffer=0x2646398*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2646398*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.536] CloseHandle (hObject=0x248) returned 1 [0103.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.540] GetFileType (hFile=0x248) returned 0x1 [0103.540] GetFileType (hFile=0x248) returned 0x1 [0103.541] WriteFile (in: hFile=0x248, lpBuffer=0x264d1d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264d1d8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.542] CloseHandle (hObject=0x248) returned 1 [0103.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x8a [0103.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8b [0103.542] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.544] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.544] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.544] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.544] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x8a [0103.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8b [0103.545] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.545] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.545] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.545] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.545] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.546] GetFileType (hFile=0x248) returned 0x1 [0103.546] GetFileType (hFile=0x248) returned 0x1 [0103.547] WriteFile (in: hFile=0x248, lpBuffer=0x265ad98*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265ad98*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.548] CloseHandle (hObject=0x248) returned 1 [0103.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.549] GetFileType (hFile=0x248) returned 0x1 [0103.549] GetFileType (hFile=0x248) returned 0x1 [0103.549] WriteFile (in: hFile=0x248, lpBuffer=0x265bef8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x265bef8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.550] CloseHandle (hObject=0x248) returned 1 [0103.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.564] GetFileType (hFile=0x248) returned 0x1 [0103.564] GetFileType (hFile=0x248) returned 0x1 [0103.565] WriteFile (in: hFile=0x248, lpBuffer=0x2662d38*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2662d38*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.566] CloseHandle (hObject=0x248) returned 1 [0103.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", lpFilePart=0x0) returned 0x8a [0103.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8b [0103.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.567] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.567] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", lpFilePart=0x0) returned 0x8a [0103.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8b [0103.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.568] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.569] GetFileType (hFile=0x248) returned 0x1 [0103.569] GetFileType (hFile=0x248) returned 0x1 [0103.570] WriteFile (in: hFile=0x248, lpBuffer=0x26708f8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26708f8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.571] CloseHandle (hObject=0x248) returned 1 [0103.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.572] GetFileType (hFile=0x248) returned 0x1 [0103.572] GetFileType (hFile=0x248) returned 0x1 [0103.572] WriteFile (in: hFile=0x248, lpBuffer=0x2671a58*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2671a58*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.574] CloseHandle (hObject=0x248) returned 1 [0103.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.579] GetFileType (hFile=0x248) returned 0x1 [0103.579] GetFileType (hFile=0x248) returned 0x1 [0103.579] WriteFile (in: hFile=0x248, lpBuffer=0x2678898*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2678898*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.580] CloseHandle (hObject=0x248) returned 1 [0103.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x8a [0103.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8b [0103.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.582] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x8a [0103.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8b [0103.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.583] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.585] GetFileType (hFile=0x248) returned 0x1 [0103.585] GetFileType (hFile=0x248) returned 0x1 [0103.585] WriteFile (in: hFile=0x248, lpBuffer=0x2686458*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2686458*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0103.586] CloseHandle (hObject=0x248) returned 1 [0103.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.587] GetFileType (hFile=0x248) returned 0x1 [0103.587] GetFileType (hFile=0x248) returned 0x1 [0103.587] WriteFile (in: hFile=0x248, lpBuffer=0x26875b8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26875b8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0103.589] CloseHandle (hObject=0x248) returned 1 [0103.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.594] GetFileType (hFile=0x248) returned 0x1 [0103.594] GetFileType (hFile=0x248) returned 0x1 [0103.595] WriteFile (in: hFile=0x248, lpBuffer=0x268e3f8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x268e3f8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0103.596] CloseHandle (hObject=0x248) returned 1 [0103.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8d [0103.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8e [0103.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.597] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.597] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.597] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.597] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8d [0103.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8e [0103.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.598] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.598] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.598] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.598] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0103.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0103.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0103.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8d [0103.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8e [0103.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.610] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8d [0103.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8e [0103.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.611] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0103.612] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0103.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0103.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x8a [0103.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8b [0103.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.620] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.620] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x8a [0103.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8b [0103.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.621] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.621] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x8a [0103.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8b [0103.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.635] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.635] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.636] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.636] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x8a [0103.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8b [0103.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.636] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.637] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.637] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.637] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x8a [0103.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8b [0103.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.645] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.646] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.646] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.646] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x8a [0103.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8b [0103.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.647] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.647] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.647] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.647] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x8a [0103.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8b [0103.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.659] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.659] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.660] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.660] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x8a [0103.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8b [0103.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.660] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.661] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x8a [0103.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8b [0103.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.671] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.672] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.672] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.672] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x8a [0103.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8b [0103.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.673] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.673] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.673] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.673] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x8a [0103.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8b [0103.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.686] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x8a [0103.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8b [0103.686] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.687] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", lpFilePart=0x0) returned 0x8a [0103.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8b [0103.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.702] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.702] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.702] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.702] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", lpFilePart=0x0) returned 0x8a [0103.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8b [0103.702] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.702] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.703] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.703] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.703] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.703] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x8a [0103.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8b [0103.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.804] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.805] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.805] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.805] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x8a [0103.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8b [0103.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.805] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.805] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.805] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.805] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0103.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0103.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0103.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x8a [0103.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8b [0103.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.812] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x8a [0103.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8b [0103.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.812] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.841] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.842] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.848] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.849] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.860] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.862] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.862] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0103.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0103.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0103.862] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0103.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0103.886] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0103.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0103.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0103.887] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0103.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0103.919] WriteFile (in: hFile=0x248, lpBuffer=0x2603098*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2603098*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0103.921] CloseHandle (hObject=0x248) returned 1 [0103.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\ENYBENY.png", lpFilePart=0x0) returned 0x83 [0103.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0103.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.922] GetFileType (hFile=0x248) returned 0x1 [0103.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0103.922] GetFileType (hFile=0x248) returned 0x1 [0103.922] WriteFile (in: hFile=0x248, lpBuffer=0x26041d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x26041d0*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0103.923] CloseHandle (hObject=0x248) returned 1 [0103.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xae [0103.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0103.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0103.935] GetFileType (hFile=0x248) returned 0x1 [0103.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0103.935] GetFileType (hFile=0x248) returned 0x1 [0103.935] WriteFile (in: hFile=0x248, lpBuffer=0x260af98*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x260af98*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0103.936] CloseHandle (hObject=0x248) returned 1 [0103.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0103.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpFilePart=0x0) returned 0x77 [0103.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", lpFilePart=0x0) returned 0x78 [0103.937] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0103.937] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0103.938] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0103.938] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0103.938] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0103.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0103.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0103.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpFilePart=0x0) returned 0x77 [0103.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", lpFilePart=0x0) returned 0x78 [0103.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0103.939] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0103.939] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0103.940] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0103.940] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0103.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0103.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0103.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpFilePart=0x0) returned 0x7f [0103.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpFilePart=0x0) returned 0x80 [0103.940] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0103.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0103.945] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0103.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0103.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0103.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpFilePart=0x0) returned 0x7f [0103.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpFilePart=0x0) returned 0x80 [0103.946] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0103.947] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.947] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.947] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.947] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.948] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0103.948] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0103.948] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0103.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0103.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0103.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.EnyBenied", lpFilePart=0x0) returned 0x91 [0103.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0103.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0103.951] GetFileType (hFile=0x248) returned 0x1 [0103.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0103.951] GetFileType (hFile=0x248) returned 0x1 [0104.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x87 [0104.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0104.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0104.548] GetFileType (hFile=0x240) returned 0x1 [0104.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.548] GetFileType (hFile=0x240) returned 0x1 [0104.548] ReadFile (in: hFile=0x240, lpBuffer=0x2759520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2759520*, lpNumberOfBytesRead=0x1ad988*=0xd4e, lpOverlapped=0x0) returned 1 [0104.572] ReadFile (in: hFile=0x240, lpBuffer=0x2759256, nNumberOfBytesToRead=0x2b2, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2759256*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0104.572] ReadFile (in: hFile=0x240, lpBuffer=0x2759520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2759520*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0104.572] CloseHandle (hObject=0x240) returned 1 [0104.573] WriteFile (in: hFile=0x248, lpBuffer=0x2757a40*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2757a40*, lpNumberOfBytesWritten=0x1ad858*=0xd70, lpOverlapped=0x0) returned 1 [0104.574] CloseHandle (hObject=0x248) returned 1 [0104.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x87 [0104.577] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png")) returned 1 [0104.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0104.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpFilePart=0x0) returned 0x88 [0104.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpFilePart=0x0) returned 0x89 [0104.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0104.580] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.580] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.583] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.584] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.585] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.586] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.587] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0104.587] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0104.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0104.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0104.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpFilePart=0x0) returned 0x88 [0104.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpFilePart=0x0) returned 0x89 [0104.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0104.589] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.589] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.589] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.589] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.590] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.590] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.590] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.590] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.590] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.590] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.590] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.590] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.591] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.592] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.593] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.593] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.593] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.593] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.593] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.593] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.593] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.593] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.594] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.594] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0104.594] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0104.594] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0104.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0104.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpFilePart=0x0) returned 0x8b [0104.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8c [0104.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.596] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.596] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.597] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.597] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpFilePart=0x0) returned 0x8b [0104.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8c [0104.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.597] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.598] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.598] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.602] GetFileType (hFile=0x248) returned 0x1 [0104.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.602] GetFileType (hFile=0x248) returned 0x1 [0104.602] WriteFile (in: hFile=0x248, lpBuffer=0x2779088*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2779088*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.603] CloseHandle (hObject=0x248) returned 1 [0104.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.604] GetFileType (hFile=0x248) returned 0x1 [0104.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.604] GetFileType (hFile=0x248) returned 0x1 [0104.604] WriteFile (in: hFile=0x248, lpBuffer=0x277a1e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x277a1e8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.606] CloseHandle (hObject=0x248) returned 1 [0104.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.612] GetFileType (hFile=0x248) returned 0x1 [0104.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.612] GetFileType (hFile=0x248) returned 0x1 [0104.613] WriteFile (in: hFile=0x248, lpBuffer=0x2781028*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2781028*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.614] CloseHandle (hObject=0x248) returned 1 [0104.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpFilePart=0x0) returned 0x8b [0104.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8c [0104.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.616] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.616] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.616] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.616] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpFilePart=0x0) returned 0x8b [0104.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8c [0104.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.617] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.617] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.617] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.617] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.619] GetFileType (hFile=0x248) returned 0x1 [0104.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.619] GetFileType (hFile=0x248) returned 0x1 [0104.619] WriteFile (in: hFile=0x248, lpBuffer=0x278ec08*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x278ec08*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.620] CloseHandle (hObject=0x248) returned 1 [0104.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.621] GetFileType (hFile=0x248) returned 0x1 [0104.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.621] GetFileType (hFile=0x248) returned 0x1 [0104.621] WriteFile (in: hFile=0x248, lpBuffer=0x278fd68*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x278fd68*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.623] CloseHandle (hObject=0x248) returned 1 [0104.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.625] GetFileType (hFile=0x248) returned 0x1 [0104.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.625] GetFileType (hFile=0x248) returned 0x1 [0104.625] WriteFile (in: hFile=0x248, lpBuffer=0x2796ba8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2796ba8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.626] CloseHandle (hObject=0x248) returned 1 [0104.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpFilePart=0x0) returned 0x8b [0104.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8c [0104.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.627] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.628] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.628] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.628] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpFilePart=0x0) returned 0x8b [0104.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8c [0104.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.629] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.629] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.629] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.629] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.630] GetFileType (hFile=0x248) returned 0x1 [0104.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.630] GetFileType (hFile=0x248) returned 0x1 [0104.630] WriteFile (in: hFile=0x248, lpBuffer=0x27a4788*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27a4788*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.633] CloseHandle (hObject=0x248) returned 1 [0104.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.634] GetFileType (hFile=0x248) returned 0x1 [0104.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.634] GetFileType (hFile=0x248) returned 0x1 [0104.634] WriteFile (in: hFile=0x248, lpBuffer=0x27a58e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27a58e8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.635] CloseHandle (hObject=0x248) returned 1 [0104.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.642] GetFileType (hFile=0x248) returned 0x1 [0104.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.642] GetFileType (hFile=0x248) returned 0x1 [0104.642] WriteFile (in: hFile=0x248, lpBuffer=0x27ac728*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27ac728*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.643] CloseHandle (hObject=0x248) returned 1 [0104.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpFilePart=0x0) returned 0x8b [0104.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8c [0104.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.678] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpFilePart=0x0) returned 0x8b [0104.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8c [0104.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.679] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.679] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.680] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.680] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.681] GetFileType (hFile=0x248) returned 0x1 [0104.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.681] GetFileType (hFile=0x248) returned 0x1 [0104.681] WriteFile (in: hFile=0x248, lpBuffer=0x27ba308*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27ba308*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.682] CloseHandle (hObject=0x248) returned 1 [0104.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.683] GetFileType (hFile=0x248) returned 0x1 [0104.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.683] GetFileType (hFile=0x248) returned 0x1 [0104.683] WriteFile (in: hFile=0x248, lpBuffer=0x27bb468*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27bb468*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.684] CloseHandle (hObject=0x248) returned 1 [0104.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.689] GetFileType (hFile=0x248) returned 0x1 [0104.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.689] GetFileType (hFile=0x248) returned 0x1 [0104.689] WriteFile (in: hFile=0x248, lpBuffer=0x27c22a8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27c22a8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.690] CloseHandle (hObject=0x248) returned 1 [0104.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpFilePart=0x0) returned 0x8b [0104.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8c [0104.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.691] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.691] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpFilePart=0x0) returned 0x8b [0104.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8c [0104.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.692] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.692] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.693] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpFilePart=0x0) returned 0x8b [0104.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8c [0104.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.731] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.731] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.731] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpFilePart=0x0) returned 0x8b [0104.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8c [0104.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.732] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.732] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.732] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpFilePart=0x0) returned 0x8b [0104.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8c [0104.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.831] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.831] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.831] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpFilePart=0x0) returned 0x8b [0104.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8c [0104.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.832] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.832] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.832] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.841] WriteFile (in: hFile=0x248, lpBuffer=0x2603a70*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2603a70*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.842] CloseHandle (hObject=0x248) returned 1 [0104.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpFilePart=0x0) returned 0x8b [0104.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8c [0104.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.844] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpFilePart=0x0) returned 0x8b [0104.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8c [0104.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.846] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.849] GetFileType (hFile=0x248) returned 0x1 [0104.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.849] GetFileType (hFile=0x248) returned 0x1 [0104.850] WriteFile (in: hFile=0x248, lpBuffer=0x2611650*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2611650*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.851] CloseHandle (hObject=0x248) returned 1 [0104.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.852] GetFileType (hFile=0x248) returned 0x1 [0104.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.852] GetFileType (hFile=0x248) returned 0x1 [0104.852] WriteFile (in: hFile=0x248, lpBuffer=0x26127b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26127b0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.853] CloseHandle (hObject=0x248) returned 1 [0104.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.861] GetFileType (hFile=0x248) returned 0x1 [0104.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.861] GetFileType (hFile=0x248) returned 0x1 [0104.861] WriteFile (in: hFile=0x248, lpBuffer=0x26195f0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26195f0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.862] CloseHandle (hObject=0x248) returned 1 [0104.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpFilePart=0x0) returned 0x8b [0104.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8c [0104.863] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.864] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.864] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.864] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpFilePart=0x0) returned 0x8b [0104.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8c [0104.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.865] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.865] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.865] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.865] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.868] GetFileType (hFile=0x248) returned 0x1 [0104.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.869] GetFileType (hFile=0x248) returned 0x1 [0104.869] WriteFile (in: hFile=0x248, lpBuffer=0x26271d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26271d0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.870] CloseHandle (hObject=0x248) returned 1 [0104.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.871] GetFileType (hFile=0x248) returned 0x1 [0104.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.871] GetFileType (hFile=0x248) returned 0x1 [0104.871] WriteFile (in: hFile=0x248, lpBuffer=0x2628330*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2628330*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.873] CloseHandle (hObject=0x248) returned 1 [0104.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.884] GetFileType (hFile=0x248) returned 0x1 [0104.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.884] GetFileType (hFile=0x248) returned 0x1 [0104.884] WriteFile (in: hFile=0x248, lpBuffer=0x262f170*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x262f170*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.885] CloseHandle (hObject=0x248) returned 1 [0104.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpFilePart=0x0) returned 0x8b [0104.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8c [0104.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.888] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpFilePart=0x0) returned 0x8b [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8c [0104.888] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.888] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.889] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.889] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.890] GetFileType (hFile=0x248) returned 0x1 [0104.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.890] GetFileType (hFile=0x248) returned 0x1 [0104.891] WriteFile (in: hFile=0x248, lpBuffer=0x263cd50*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x263cd50*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.892] CloseHandle (hObject=0x248) returned 1 [0104.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.893] GetFileType (hFile=0x248) returned 0x1 [0104.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.893] GetFileType (hFile=0x248) returned 0x1 [0104.893] WriteFile (in: hFile=0x248, lpBuffer=0x263deb0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x263deb0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.895] CloseHandle (hObject=0x248) returned 1 [0104.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.901] GetFileType (hFile=0x248) returned 0x1 [0104.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.901] GetFileType (hFile=0x248) returned 0x1 [0104.901] WriteFile (in: hFile=0x248, lpBuffer=0x2644cf0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2644cf0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.902] CloseHandle (hObject=0x248) returned 1 [0104.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpFilePart=0x0) returned 0x8c [0104.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8d [0104.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.904] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpFilePart=0x0) returned 0x8c [0104.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8d [0104.904] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.904] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.905] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0104.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.906] GetFileType (hFile=0x248) returned 0x1 [0104.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.906] GetFileType (hFile=0x248) returned 0x1 [0104.906] WriteFile (in: hFile=0x248, lpBuffer=0x2652900*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2652900*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.907] CloseHandle (hObject=0x248) returned 1 [0104.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0104.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.909] GetFileType (hFile=0x248) returned 0x1 [0104.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.909] GetFileType (hFile=0x248) returned 0x1 [0104.909] WriteFile (in: hFile=0x248, lpBuffer=0x2653a68*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2653a68*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.910] CloseHandle (hObject=0x248) returned 1 [0104.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0104.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.923] GetFileType (hFile=0x248) returned 0x1 [0104.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.923] GetFileType (hFile=0x248) returned 0x1 [0104.923] WriteFile (in: hFile=0x248, lpBuffer=0x265a8b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265a8b0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.924] CloseHandle (hObject=0x248) returned 1 [0104.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpFilePart=0x0) returned 0x8b [0104.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8c [0104.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.926] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.926] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.927] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.927] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpFilePart=0x0) returned 0x8b [0104.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8c [0104.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.928] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.928] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.928] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.928] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.929] GetFileType (hFile=0x248) returned 0x1 [0104.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.929] GetFileType (hFile=0x248) returned 0x1 [0104.930] WriteFile (in: hFile=0x248, lpBuffer=0x2668490*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2668490*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.931] CloseHandle (hObject=0x248) returned 1 [0104.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.932] GetFileType (hFile=0x248) returned 0x1 [0104.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.932] GetFileType (hFile=0x248) returned 0x1 [0104.932] WriteFile (in: hFile=0x248, lpBuffer=0x26695f0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26695f0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.933] CloseHandle (hObject=0x248) returned 1 [0104.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.940] GetFileType (hFile=0x248) returned 0x1 [0104.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.940] GetFileType (hFile=0x248) returned 0x1 [0104.941] WriteFile (in: hFile=0x248, lpBuffer=0x2670430*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2670430*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.942] CloseHandle (hObject=0x248) returned 1 [0104.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpFilePart=0x0) returned 0x8b [0104.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8c [0104.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.943] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.943] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.943] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.943] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpFilePart=0x0) returned 0x8b [0104.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8c [0104.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.944] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.945] GetFileType (hFile=0x248) returned 0x1 [0104.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.945] GetFileType (hFile=0x248) returned 0x1 [0104.946] WriteFile (in: hFile=0x248, lpBuffer=0x267e010*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x267e010*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.947] CloseHandle (hObject=0x248) returned 1 [0104.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.948] GetFileType (hFile=0x248) returned 0x1 [0104.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.948] GetFileType (hFile=0x248) returned 0x1 [0104.948] WriteFile (in: hFile=0x248, lpBuffer=0x267f170*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x267f170*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.950] CloseHandle (hObject=0x248) returned 1 [0104.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.963] GetFileType (hFile=0x248) returned 0x1 [0104.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.964] GetFileType (hFile=0x248) returned 0x1 [0104.964] WriteFile (in: hFile=0x248, lpBuffer=0x2685fb0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2685fb0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0104.965] CloseHandle (hObject=0x248) returned 1 [0104.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpFilePart=0x0) returned 0x8b [0104.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8c [0104.965] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.966] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.967] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.967] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpFilePart=0x0) returned 0x8b [0104.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8c [0104.967] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.968] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.968] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.968] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.969] GetFileType (hFile=0x248) returned 0x1 [0104.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.969] GetFileType (hFile=0x248) returned 0x1 [0104.969] WriteFile (in: hFile=0x248, lpBuffer=0x2693b90*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2693b90*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0104.970] CloseHandle (hObject=0x248) returned 1 [0104.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.971] GetFileType (hFile=0x248) returned 0x1 [0104.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.971] GetFileType (hFile=0x248) returned 0x1 [0104.971] WriteFile (in: hFile=0x248, lpBuffer=0x2694cf0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2694cf0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0104.973] CloseHandle (hObject=0x248) returned 1 [0104.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpFilePart=0x0) returned 0x8b [0104.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8c [0104.987] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.988] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.988] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.988] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.988] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpFilePart=0x0) returned 0x8b [0104.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8c [0104.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0104.989] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.989] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0104.989] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0104.989] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0104.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0104.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0104.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0104.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0104.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0104.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0104.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0104.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0104.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0104.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0104.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0104.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0104.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpFilePart=0x0) returned 0x8b [0104.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8c [0104.999] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.000] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.000] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.000] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.000] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpFilePart=0x0) returned 0x8b [0105.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8c [0105.001] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.001] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.001] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.001] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.001] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpFilePart=0x0) returned 0x8b [0105.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8c [0105.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.011] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpFilePart=0x0) returned 0x8b [0105.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8c [0105.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.012] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.012] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.012] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.012] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpFilePart=0x0) returned 0x8b [0105.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8c [0105.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.034] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.035] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.035] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.035] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpFilePart=0x0) returned 0x8b [0105.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8c [0105.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.036] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.036] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.036] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.036] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpFilePart=0x0) returned 0x8b [0105.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8c [0105.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.044] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.044] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.044] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.044] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpFilePart=0x0) returned 0x8b [0105.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8c [0105.045] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.045] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.045] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.045] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.045] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpFilePart=0x0) returned 0x8b [0105.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8c [0105.069] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.071] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.071] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.071] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.071] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpFilePart=0x0) returned 0x8b [0105.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8c [0105.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.072] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.072] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.072] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.072] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpFilePart=0x0) returned 0x8b [0105.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8c [0105.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.085] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.086] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.086] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpFilePart=0x0) returned 0x8b [0105.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8c [0105.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.087] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpFilePart=0x0) returned 0x8b [0105.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8c [0105.107] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.108] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpFilePart=0x0) returned 0x8b [0105.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8c [0105.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.109] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.109] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.109] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.109] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpFilePart=0x0) returned 0x8b [0105.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8c [0105.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.126] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.126] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.126] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.126] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpFilePart=0x0) returned 0x8b [0105.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8c [0105.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.127] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpFilePart=0x0) returned 0x8b [0105.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8c [0105.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.143] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.143] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.143] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpFilePart=0x0) returned 0x8b [0105.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8c [0105.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.144] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.144] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.144] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpFilePart=0x0) returned 0x8b [0105.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8c [0105.158] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.159] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpFilePart=0x0) returned 0x8b [0105.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8c [0105.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.160] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.160] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.160] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8e [0105.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8f [0105.167] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.169] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8e [0105.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8f [0105.169] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.170] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9a [0105.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\ENYBENY.png", lpFilePart=0x0) returned 0x9a [0105.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc5 [0105.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8e [0105.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8f [0105.182] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.182] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.182] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.182] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.183] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8e [0105.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8f [0105.183] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.183] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.183] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.183] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.183] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9a [0105.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\ENYBENY.png", lpFilePart=0x0) returned 0x9a [0105.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc5 [0105.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpFilePart=0x0) returned 0x8b [0105.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8c [0105.200] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.201] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.202] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.202] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.202] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpFilePart=0x0) returned 0x8b [0105.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8c [0105.202] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.202] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.202] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.202] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.202] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpFilePart=0x0) returned 0x8b [0105.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8c [0105.220] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.220] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.220] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.220] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.220] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpFilePart=0x0) returned 0x8b [0105.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8c [0105.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.221] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.221] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.221] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.221] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpFilePart=0x0) returned 0x8b [0105.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8c [0105.232] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.233] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.233] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.233] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.234] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpFilePart=0x0) returned 0x8b [0105.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8c [0105.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.234] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpFilePart=0x0) returned 0x8b [0105.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8c [0105.250] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.251] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpFilePart=0x0) returned 0x8b [0105.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8c [0105.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.251] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.252] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.252] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.256] WriteFile (in: hFile=0x248, lpBuffer=0x26063a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26063a8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0105.257] CloseHandle (hObject=0x248) returned 1 [0105.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.258] GetFileType (hFile=0x248) returned 0x1 [0105.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.258] GetFileType (hFile=0x248) returned 0x1 [0105.258] WriteFile (in: hFile=0x248, lpBuffer=0x2607508*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2607508*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0105.260] CloseHandle (hObject=0x248) returned 1 [0105.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.265] GetFileType (hFile=0x248) returned 0x1 [0105.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.265] GetFileType (hFile=0x248) returned 0x1 [0105.266] WriteFile (in: hFile=0x248, lpBuffer=0x260e348*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x260e348*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0105.267] CloseHandle (hObject=0x248) returned 1 [0105.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", lpFilePart=0x0) returned 0x8b [0105.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8c [0105.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.269] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", lpFilePart=0x0) returned 0x8b [0105.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8c [0105.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.270] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.271] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.275] GetFileType (hFile=0x248) returned 0x1 [0105.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.275] GetFileType (hFile=0x248) returned 0x1 [0105.275] WriteFile (in: hFile=0x248, lpBuffer=0x261bf28*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261bf28*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0105.276] CloseHandle (hObject=0x248) returned 1 [0105.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.278] GetFileType (hFile=0x248) returned 0x1 [0105.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.278] GetFileType (hFile=0x248) returned 0x1 [0105.278] WriteFile (in: hFile=0x248, lpBuffer=0x261d088*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x261d088*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0105.279] CloseHandle (hObject=0x248) returned 1 [0105.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.287] GetFileType (hFile=0x248) returned 0x1 [0105.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.287] GetFileType (hFile=0x248) returned 0x1 [0105.287] WriteFile (in: hFile=0x248, lpBuffer=0x2623ec8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2623ec8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0105.288] CloseHandle (hObject=0x248) returned 1 [0105.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", lpFilePart=0x0) returned 0x8b [0105.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8c [0105.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.289] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.289] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.289] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.289] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", lpFilePart=0x0) returned 0x8b [0105.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8c [0105.290] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.290] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.293] GetFileType (hFile=0x248) returned 0x1 [0105.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.293] GetFileType (hFile=0x248) returned 0x1 [0105.293] WriteFile (in: hFile=0x248, lpBuffer=0x2631aa8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2631aa8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0105.294] CloseHandle (hObject=0x248) returned 1 [0105.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.295] GetFileType (hFile=0x248) returned 0x1 [0105.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.295] GetFileType (hFile=0x248) returned 0x1 [0105.295] WriteFile (in: hFile=0x248, lpBuffer=0x2632c08*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2632c08*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0105.296] CloseHandle (hObject=0x248) returned 1 [0105.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.304] GetFileType (hFile=0x248) returned 0x1 [0105.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.304] GetFileType (hFile=0x248) returned 0x1 [0105.304] WriteFile (in: hFile=0x248, lpBuffer=0x2639a48*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2639a48*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0105.305] CloseHandle (hObject=0x248) returned 1 [0105.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", lpFilePart=0x0) returned 0x8b [0105.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8c [0105.306] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.307] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.307] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.307] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.307] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", lpFilePart=0x0) returned 0x8b [0105.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8c [0105.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.308] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.308] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.308] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.308] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.309] GetFileType (hFile=0x248) returned 0x1 [0105.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.309] GetFileType (hFile=0x248) returned 0x1 [0105.309] WriteFile (in: hFile=0x248, lpBuffer=0x2647628*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2647628*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0105.310] CloseHandle (hObject=0x248) returned 1 [0105.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\ENYBENY.png", lpFilePart=0x0) returned 0x97 [0105.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.311] GetFileType (hFile=0x248) returned 0x1 [0105.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.311] GetFileType (hFile=0x248) returned 0x1 [0105.311] WriteFile (in: hFile=0x248, lpBuffer=0x2648788*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2648788*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0105.312] CloseHandle (hObject=0x248) returned 1 [0105.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc2 [0105.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.317] GetFileType (hFile=0x248) returned 0x1 [0105.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.317] GetFileType (hFile=0x248) returned 0x1 [0105.318] WriteFile (in: hFile=0x248, lpBuffer=0x264f5c8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264f5c8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0105.319] CloseHandle (hObject=0x248) returned 1 [0105.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", lpFilePart=0x0) returned 0x8b [0105.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8c [0105.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.320] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.320] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.320] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.320] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", lpFilePart=0x0) returned 0x8b [0105.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8c [0105.321] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.321] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.321] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.321] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.321] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x97 [0105.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.323] GetFileType (hFile=0x248) returned 0x1 [0105.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.323] GetFileType (hFile=0x248) returned 0x1 [0105.323] WriteFile (in: hFile=0x248, lpBuffer=0x265d1a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265d1a8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0105.324] CloseHandle (hObject=0x248) returned 1 [0105.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.325] GetFileType (hFile=0x248) returned 0x1 [0105.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.326] GetFileType (hFile=0x248) returned 0x1 [0105.326] WriteFile (in: hFile=0x248, lpBuffer=0x265e308*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x265e308*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0105.327] CloseHandle (hObject=0x248) returned 1 [0105.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.337] GetFileType (hFile=0x248) returned 0x1 [0105.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.338] GetFileType (hFile=0x248) returned 0x1 [0105.338] WriteFile (in: hFile=0x248, lpBuffer=0x2665148*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2665148*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0105.338] CloseHandle (hObject=0x248) returned 1 [0105.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.340] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.340] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.341] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.341] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.341] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.341] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.342] GetFileType (hFile=0x248) returned 0x1 [0105.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.342] GetFileType (hFile=0x248) returned 0x1 [0105.342] WriteFile (in: hFile=0x248, lpBuffer=0x2672d28*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2672d28*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0105.343] CloseHandle (hObject=0x248) returned 1 [0105.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.344] GetFileType (hFile=0x248) returned 0x1 [0105.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.344] GetFileType (hFile=0x248) returned 0x1 [0105.344] WriteFile (in: hFile=0x248, lpBuffer=0x2673e88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2673e88*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0105.345] CloseHandle (hObject=0x248) returned 1 [0105.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.357] GetFileType (hFile=0x248) returned 0x1 [0105.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.357] GetFileType (hFile=0x248) returned 0x1 [0105.357] WriteFile (in: hFile=0x248, lpBuffer=0x267acc8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x267acc8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0105.358] CloseHandle (hObject=0x248) returned 1 [0105.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.359] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.359] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.359] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.360] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.360] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.361] GetFileType (hFile=0x248) returned 0x1 [0105.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.361] GetFileType (hFile=0x248) returned 0x1 [0105.362] WriteFile (in: hFile=0x248, lpBuffer=0x26888a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26888a8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0105.363] CloseHandle (hObject=0x248) returned 1 [0105.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.364] GetFileType (hFile=0x248) returned 0x1 [0105.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.364] GetFileType (hFile=0x248) returned 0x1 [0105.364] WriteFile (in: hFile=0x248, lpBuffer=0x2689a08*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2689a08*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0105.365] CloseHandle (hObject=0x248) returned 1 [0105.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.371] GetFileType (hFile=0x248) returned 0x1 [0105.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.371] GetFileType (hFile=0x248) returned 0x1 [0105.372] WriteFile (in: hFile=0x248, lpBuffer=0x2690848*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2690848*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0105.373] CloseHandle (hObject=0x248) returned 1 [0105.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.373] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.374] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.375] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.375] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.375] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.375] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.375] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.391] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.391] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.391] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.391] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0105.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0105.392] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0105.392] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0105.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0105.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0105.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0105.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0105.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0105.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0105.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0105.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0105.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0105.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0105.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0105.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0105.412] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0105.412] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0105.412] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0105.412] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0105.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0105.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0105.413] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0105.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0105.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0105.413] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0105.413] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0105.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0105.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0105.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0105.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0105.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0105.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0105.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0105.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0105.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0105.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0105.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0105.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0105.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0105.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0105.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0105.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0105.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0105.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0105.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0105.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0105.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0105.456] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0105.457] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0105.457] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0105.457] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0105.458] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0105.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0105.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0105.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0105.458] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0105.458] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0105.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0105.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0105.462] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0105.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0105.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0105.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0105.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.464] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.465] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.465] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.465] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.465] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.465] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.465] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0105.465] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0105.466] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0105.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0105.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0105.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0105.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0105.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0105.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0105.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0105.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0106.001] GetFileType (hFile=0x240) returned 0x1 [0106.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0106.001] GetFileType (hFile=0x240) returned 0x1 [0106.001] ReadFile (in: hFile=0x240, lpBuffer=0x2658710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2658710*, lpNumberOfBytesRead=0x1ad988*=0xd47, lpOverlapped=0x0) returned 1 [0106.014] ReadFile (in: hFile=0x240, lpBuffer=0x265843f, nNumberOfBytesToRead=0x2b9, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x265843f*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0106.015] ReadFile (in: hFile=0x240, lpBuffer=0x2658710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2658710*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0106.015] CloseHandle (hObject=0x240) returned 1 [0106.015] WriteFile (in: hFile=0x248, lpBuffer=0x2656c18*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2656c18*, lpNumberOfBytesWritten=0x1ad858*=0xd70, lpOverlapped=0x0) returned 1 [0106.016] CloseHandle (hObject=0x248) returned 1 [0106.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0106.016] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png")) returned 1 [0106.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.EnyBenied", lpFilePart=0x0) returned 0x93 [0106.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0106.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0106.019] GetFileType (hFile=0x248) returned 0x1 [0106.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0106.019] GetFileType (hFile=0x248) returned 0x1 [0106.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0106.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0106.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0106.471] GetFileType (hFile=0x240) returned 0x1 [0106.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0106.471] GetFileType (hFile=0x240) returned 0x1 [0106.471] ReadFile (in: hFile=0x240, lpBuffer=0x27a0950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27a0950*, lpNumberOfBytesRead=0x1ad988*=0x9d, lpOverlapped=0x0) returned 1 [0106.472] ReadFile (in: hFile=0x240, lpBuffer=0x27a0950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27a0950*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0106.472] CloseHandle (hObject=0x240) returned 1 [0106.472] WriteFile (in: hFile=0x248, lpBuffer=0x279ee60*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x279ee60*, lpNumberOfBytesWritten=0x1ad858*=0xc0, lpOverlapped=0x0) returned 1 [0106.473] CloseHandle (hObject=0x248) returned 1 [0106.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0106.473] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png")) returned 1 [0106.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.EnyBenied", lpFilePart=0x0) returned 0x91 [0106.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0106.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0106.475] GetFileType (hFile=0x248) returned 0x1 [0106.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0106.475] GetFileType (hFile=0x248) returned 0x1 [0107.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x87 [0107.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0107.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0107.112] GetFileType (hFile=0x240) returned 0x1 [0107.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.112] GetFileType (hFile=0x240) returned 0x1 [0107.112] ReadFile (in: hFile=0x240, lpBuffer=0x26e7f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e7f48*, lpNumberOfBytesRead=0x1ad988*=0x5c, lpOverlapped=0x0) returned 1 [0107.113] ReadFile (in: hFile=0x240, lpBuffer=0x26e7f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e7f48*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0107.113] CloseHandle (hObject=0x240) returned 1 [0107.113] WriteFile (in: hFile=0x248, lpBuffer=0x26e6460*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x26e6460*, lpNumberOfBytesWritten=0x1ad858*=0x80, lpOverlapped=0x0) returned 1 [0107.116] CloseHandle (hObject=0x248) returned 1 [0107.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x87 [0107.116] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html")) returned 1 [0107.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.EnyBenied", lpFilePart=0x0) returned 0x8f [0107.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0107.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.119] GetFileType (hFile=0x248) returned 0x1 [0107.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.119] GetFileType (hFile=0x248) returned 0x1 [0107.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x85 [0107.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0107.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0107.637] GetFileType (hFile=0x240) returned 0x1 [0107.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.637] GetFileType (hFile=0x240) returned 0x1 [0107.637] ReadFile (in: hFile=0x240, lpBuffer=0x262f080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262f080*, lpNumberOfBytesRead=0x1ad988*=0x5f, lpOverlapped=0x0) returned 1 [0107.639] ReadFile (in: hFile=0x240, lpBuffer=0x262f080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262f080*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0107.639] CloseHandle (hObject=0x240) returned 1 [0107.639] WriteFile (in: hFile=0x248, lpBuffer=0x262d5a0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x262d5a0*, lpNumberOfBytesWritten=0x1ad858*=0x80, lpOverlapped=0x0) returned 1 [0107.640] CloseHandle (hObject=0x248) returned 1 [0107.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x85 [0107.641] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js")) returned 1 [0107.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0107.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0107.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0107.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0107.652] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.652] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.652] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.652] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.652] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.652] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.653] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.653] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.653] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.653] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.653] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.653] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.654] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.654] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.654] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.654] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.654] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.654] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.654] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.654] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.655] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.655] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.655] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.655] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.655] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.655] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.656] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.656] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.656] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.656] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.656] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.656] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0107.658] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0107.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0107.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0107.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0107.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0107.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0107.660] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.662] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.663] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.664] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0107.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0107.666] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0107.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0107.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0107.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0107.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.668] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0107.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0107.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.669] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0107.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.673] GetFileType (hFile=0x248) returned 0x1 [0107.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.673] GetFileType (hFile=0x248) returned 0x1 [0107.674] WriteFile (in: hFile=0x248, lpBuffer=0x264ef28*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264ef28*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0107.675] CloseHandle (hObject=0x248) returned 1 [0107.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0107.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0107.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.676] GetFileType (hFile=0x248) returned 0x1 [0107.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0107.676] GetFileType (hFile=0x248) returned 0x1 [0107.676] WriteFile (in: hFile=0x248, lpBuffer=0x2650088*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2650088*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0107.677] CloseHandle (hObject=0x248) returned 1 [0107.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0107.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.713] GetFileType (hFile=0x248) returned 0x1 [0107.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.713] GetFileType (hFile=0x248) returned 0x1 [0107.713] WriteFile (in: hFile=0x248, lpBuffer=0x2656ec8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2656ec8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0107.714] CloseHandle (hObject=0x248) returned 1 [0107.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0107.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0107.716] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.717] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.717] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.717] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.718] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0107.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0107.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.718] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.719] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.719] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.719] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0107.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.720] GetFileType (hFile=0x248) returned 0x1 [0107.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.720] GetFileType (hFile=0x248) returned 0x1 [0107.721] WriteFile (in: hFile=0x248, lpBuffer=0x26649f8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26649f8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0107.722] CloseHandle (hObject=0x248) returned 1 [0107.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0107.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0107.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.723] GetFileType (hFile=0x248) returned 0x1 [0107.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0107.723] GetFileType (hFile=0x248) returned 0x1 [0107.723] WriteFile (in: hFile=0x248, lpBuffer=0x2665b58*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2665b58*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0107.724] CloseHandle (hObject=0x248) returned 1 [0107.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0107.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.786] GetFileType (hFile=0x248) returned 0x1 [0107.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.786] GetFileType (hFile=0x248) returned 0x1 [0107.786] WriteFile (in: hFile=0x248, lpBuffer=0x266c998*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x266c998*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0107.787] CloseHandle (hObject=0x248) returned 1 [0107.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0107.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0107.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.788] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.788] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.788] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.788] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0107.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0107.788] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.789] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.789] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.789] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.789] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0107.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.790] GetFileType (hFile=0x248) returned 0x1 [0107.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.790] GetFileType (hFile=0x248) returned 0x1 [0107.790] WriteFile (in: hFile=0x248, lpBuffer=0x267a4c8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x267a4c8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0107.791] CloseHandle (hObject=0x248) returned 1 [0107.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0107.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0107.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.792] GetFileType (hFile=0x248) returned 0x1 [0107.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0107.792] GetFileType (hFile=0x248) returned 0x1 [0107.792] WriteFile (in: hFile=0x248, lpBuffer=0x267b628*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x267b628*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0107.794] CloseHandle (hObject=0x248) returned 1 [0107.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0107.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.869] GetFileType (hFile=0x248) returned 0x1 [0107.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.869] GetFileType (hFile=0x248) returned 0x1 [0107.869] WriteFile (in: hFile=0x248, lpBuffer=0x2682468*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2682468*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0107.870] CloseHandle (hObject=0x248) returned 1 [0107.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0107.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0107.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.871] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.872] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0107.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0107.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.872] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.873] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.873] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.873] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0107.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.874] GetFileType (hFile=0x248) returned 0x1 [0107.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.874] GetFileType (hFile=0x248) returned 0x1 [0107.874] WriteFile (in: hFile=0x248, lpBuffer=0x268ff98*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x268ff98*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0107.875] CloseHandle (hObject=0x248) returned 1 [0107.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0107.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0107.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.876] GetFileType (hFile=0x248) returned 0x1 [0107.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0107.876] GetFileType (hFile=0x248) returned 0x1 [0107.876] WriteFile (in: hFile=0x248, lpBuffer=0x26910f8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26910f8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0107.878] CloseHandle (hObject=0x248) returned 1 [0107.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0107.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0107.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0107.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.900] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0107.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0107.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.901] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0107.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0107.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0107.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0107.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0107.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0107.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0107.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.945] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.945] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.945] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.945] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0107.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0107.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.946] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.946] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.946] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.946] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0107.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.946] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0107.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0107.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0107.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0107.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0107.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0107.953] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.953] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.953] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.953] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.953] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0107.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0107.953] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.954] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0107.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0107.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0107.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0107.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0107.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0107.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0107.991] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.992] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.992] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.992] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.992] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0107.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0107.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0107.992] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0107.992] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.993] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0107.993] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0107.993] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0107.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0107.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0107.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0107.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0107.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0107.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0107.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0107.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0107.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0107.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0107.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0107.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0108.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0108.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.013] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0108.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0108.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.013] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.013] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0108.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0108.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0108.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0108.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0108.020] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.021] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.021] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.021] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.021] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0108.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0108.021] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.021] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.021] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.022] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.022] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0108.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0108.027] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.027] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.027] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.027] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.027] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0108.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0108.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.028] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.028] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.028] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.028] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0108.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0108.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0108.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0108.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0108.034] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.035] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.035] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.035] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.035] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0108.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0108.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.035] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.035] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.035] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.036] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0108.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0108.069] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.069] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.069] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.069] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.069] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0108.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0108.070] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.070] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.070] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.070] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.070] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.079] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0108.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0108.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.088] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0108.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0108.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.088] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0108.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0108.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0108.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0108.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0108.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.098] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0108.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0108.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.098] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0108.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0108.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.117] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0108.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0108.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.117] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0108.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0108.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.127] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0108.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0108.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.127] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0108.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0108.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.134] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0108.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0108.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.134] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0108.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0108.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.141] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.141] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.141] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.141] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0108.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0108.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.142] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.142] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.142] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.142] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.142] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0108.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0108.166] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.167] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0108.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0108.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.168] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0108.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0108.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.218] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.219] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0108.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0108.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.219] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0108.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0108.281] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.285] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.285] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0108.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0108.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.286] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.286] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.286] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.286] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.289] WriteFile (in: hFile=0x248, lpBuffer=0x261b400*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261b400*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0108.291] CloseHandle (hObject=0x248) returned 1 [0108.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.291] GetFileType (hFile=0x248) returned 0x1 [0108.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.291] GetFileType (hFile=0x248) returned 0x1 [0108.291] WriteFile (in: hFile=0x248, lpBuffer=0x261c560*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x261c560*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0108.293] CloseHandle (hObject=0x248) returned 1 [0108.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.309] GetFileType (hFile=0x248) returned 0x1 [0108.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.309] GetFileType (hFile=0x248) returned 0x1 [0108.309] WriteFile (in: hFile=0x248, lpBuffer=0x26233a0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26233a0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0108.310] CloseHandle (hObject=0x248) returned 1 [0108.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0108.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0108.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.311] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.311] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.311] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.311] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0108.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0108.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.312] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.312] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.312] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.312] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.314] GetFileType (hFile=0x248) returned 0x1 [0108.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.314] GetFileType (hFile=0x248) returned 0x1 [0108.315] WriteFile (in: hFile=0x248, lpBuffer=0x2630ed0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2630ed0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0108.315] CloseHandle (hObject=0x248) returned 1 [0108.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.316] GetFileType (hFile=0x248) returned 0x1 [0108.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.316] GetFileType (hFile=0x248) returned 0x1 [0108.316] WriteFile (in: hFile=0x248, lpBuffer=0x2632030*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2632030*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0108.317] CloseHandle (hObject=0x248) returned 1 [0108.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.349] GetFileType (hFile=0x248) returned 0x1 [0108.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.349] GetFileType (hFile=0x248) returned 0x1 [0108.349] WriteFile (in: hFile=0x248, lpBuffer=0x2638e70*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2638e70*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0108.350] CloseHandle (hObject=0x248) returned 1 [0108.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0108.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0108.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.353] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.353] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.353] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.353] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0108.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0108.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.353] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.354] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.354] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.354] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.355] GetFileType (hFile=0x248) returned 0x1 [0108.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.355] GetFileType (hFile=0x248) returned 0x1 [0108.355] WriteFile (in: hFile=0x248, lpBuffer=0x26469a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26469a0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0108.356] CloseHandle (hObject=0x248) returned 1 [0108.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.357] GetFileType (hFile=0x248) returned 0x1 [0108.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.357] GetFileType (hFile=0x248) returned 0x1 [0108.357] WriteFile (in: hFile=0x248, lpBuffer=0x2647b00*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2647b00*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0108.358] CloseHandle (hObject=0x248) returned 1 [0108.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.372] GetFileType (hFile=0x248) returned 0x1 [0108.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.372] GetFileType (hFile=0x248) returned 0x1 [0108.372] WriteFile (in: hFile=0x248, lpBuffer=0x264e940*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264e940*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0108.373] CloseHandle (hObject=0x248) returned 1 [0108.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0108.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0108.373] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.374] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0108.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0108.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.375] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.375] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.375] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.376] GetFileType (hFile=0x248) returned 0x1 [0108.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.376] GetFileType (hFile=0x248) returned 0x1 [0108.376] WriteFile (in: hFile=0x248, lpBuffer=0x265c470*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265c470*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0108.376] CloseHandle (hObject=0x248) returned 1 [0108.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.377] GetFileType (hFile=0x248) returned 0x1 [0108.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.377] GetFileType (hFile=0x248) returned 0x1 [0108.377] WriteFile (in: hFile=0x248, lpBuffer=0x265d5d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x265d5d0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0108.378] CloseHandle (hObject=0x248) returned 1 [0108.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.434] GetFileType (hFile=0x248) returned 0x1 [0108.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.434] GetFileType (hFile=0x248) returned 0x1 [0108.434] WriteFile (in: hFile=0x248, lpBuffer=0x2664410*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2664410*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0108.435] CloseHandle (hObject=0x248) returned 1 [0108.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0108.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0108.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.437] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.437] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.437] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.437] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0108.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0108.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.438] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.438] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.438] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.438] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.439] GetFileType (hFile=0x248) returned 0x1 [0108.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.439] GetFileType (hFile=0x248) returned 0x1 [0108.439] WriteFile (in: hFile=0x248, lpBuffer=0x2671f40*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2671f40*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0108.441] CloseHandle (hObject=0x248) returned 1 [0108.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.441] GetFileType (hFile=0x248) returned 0x1 [0108.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.441] GetFileType (hFile=0x248) returned 0x1 [0108.441] WriteFile (in: hFile=0x248, lpBuffer=0x26730a0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26730a0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0108.443] CloseHandle (hObject=0x248) returned 1 [0108.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.446] GetFileType (hFile=0x248) returned 0x1 [0108.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.446] GetFileType (hFile=0x248) returned 0x1 [0108.446] WriteFile (in: hFile=0x248, lpBuffer=0x2679ee0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2679ee0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0108.447] CloseHandle (hObject=0x248) returned 1 [0108.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0108.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0108.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.447] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.448] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.448] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0108.448] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0108.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0108.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.448] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.449] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0108.449] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.450] GetFileType (hFile=0x248) returned 0x1 [0108.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.450] GetFileType (hFile=0x248) returned 0x1 [0108.451] WriteFile (in: hFile=0x248, lpBuffer=0x2687a10*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2687a10*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0108.452] CloseHandle (hObject=0x248) returned 1 [0108.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.456] GetFileType (hFile=0x248) returned 0x1 [0108.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.456] GetFileType (hFile=0x248) returned 0x1 [0108.456] WriteFile (in: hFile=0x248, lpBuffer=0x2688b70*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2688b70*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0108.457] CloseHandle (hObject=0x248) returned 1 [0108.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.486] GetFileType (hFile=0x248) returned 0x1 [0108.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.487] GetFileType (hFile=0x248) returned 0x1 [0108.487] WriteFile (in: hFile=0x248, lpBuffer=0x268f9b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x268f9b0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0108.488] CloseHandle (hObject=0x248) returned 1 [0108.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0108.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0108.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.490] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0108.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0108.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.491] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.492] GetFileType (hFile=0x248) returned 0x1 [0108.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.492] GetFileType (hFile=0x248) returned 0x1 [0108.492] WriteFile (in: hFile=0x248, lpBuffer=0x269d4e0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x269d4e0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0108.493] CloseHandle (hObject=0x248) returned 1 [0108.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0108.494] GetFileType (hFile=0x248) returned 0x1 [0108.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.494] GetFileType (hFile=0x248) returned 0x1 [0108.494] WriteFile (in: hFile=0x248, lpBuffer=0x269e640*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x269e640*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0108.496] CloseHandle (hObject=0x248) returned 1 [0108.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0108.537] GetFileType (hFile=0x248) returned 0x1 [0108.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.537] GetFileType (hFile=0x248) returned 0x1 [0108.537] WriteFile (in: hFile=0x248, lpBuffer=0x26a5480*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26a5480*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0108.538] CloseHandle (hObject=0x248) returned 1 [0108.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0108.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0108.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.539] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0108.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0108.540] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.540] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0108.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0108.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0108.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0108.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0108.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.574] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0108.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0108.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.575] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0108.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0108.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0108.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0108.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0108.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.592] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0108.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0108.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.593] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0108.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0108.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.617] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0108.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0108.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.618] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0108.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0108.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.640] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0108.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0108.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.641] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0108.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0108.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.667] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0108.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0108.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.668] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0108.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0108.696] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.697] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0108.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0108.697] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.698] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0108.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0108.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.740] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0108.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0108.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.741] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0108.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0108.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.816] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0108.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0108.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.817] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0108.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0108.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.856] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0108.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0108.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.857] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0108.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0108.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.894] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0108.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0108.895] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.895] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0108.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0108.912] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.914] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0108.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0108.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.914] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0108.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0108.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0108.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0108.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0108.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.944] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0108.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0108.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.944] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0108.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0108.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0108.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0108.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0108.958] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.958] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0108.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0108.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0108.959] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0108.959] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0108.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0108.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0108.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0108.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0108.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0108.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0108.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0108.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0108.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0108.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ENYBENY.TXT", lpFilePart=0x0) returned 0x92 [0108.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0108.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0108.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ENYBENY.png", lpFilePart=0x0) returned 0x92 [0108.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0108.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0108.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbd [0108.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0109.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x87 [0109.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0109.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0109.033] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0109.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x87 [0109.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0109.034] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0109.034] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0109.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\ENYBENY.TXT", lpFilePart=0x0) returned 0x93 [0109.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\ENYBENY.png", lpFilePart=0x0) returned 0x93 [0109.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbe [0109.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x89 [0109.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\ENYBENY.png", lpFilePart=0x0) returned 0x89 [0109.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xb4 [0109.087] WriteFile (in: hFile=0x248, lpBuffer=0x260d828*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad898, lpOverlapped=0x0 | out: lpBuffer=0x260d828*, lpNumberOfBytesWritten=0x1ad898*=0xc6, lpOverlapped=0x0) returned 1 [0109.089] CloseHandle (hObject=0x248) returned 1 [0109.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\ENYBENY.TXT", lpFilePart=0x0) returned 0x83 [0109.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0109.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0109.092] GetFileType (hFile=0x248) returned 0x1 [0109.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0109.092] GetFileType (hFile=0x248) returned 0x1 [0109.093] WriteFile (in: hFile=0x248, lpBuffer=0x2617d40*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2617d40*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0109.094] CloseHandle (hObject=0x248) returned 1 [0109.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\ENYBENY.png", lpFilePart=0x0) returned 0x83 [0109.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0109.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0109.095] GetFileType (hFile=0x248) returned 0x1 [0109.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0109.095] GetFileType (hFile=0x248) returned 0x1 [0109.095] WriteFile (in: hFile=0x248, lpBuffer=0x2618e78*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x2618e78*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0109.096] CloseHandle (hObject=0x248) returned 1 [0109.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xae [0109.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0109.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0109.124] GetFileType (hFile=0x248) returned 0x1 [0109.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0109.124] GetFileType (hFile=0x248) returned 0x1 [0109.124] WriteFile (in: hFile=0x248, lpBuffer=0x261fc40*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x261fc40*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0109.125] CloseHandle (hObject=0x248) returned 1 [0109.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0109.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x77 [0109.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x78 [0109.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0109.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0109.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0109.127] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0109.127] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0109.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0109.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0109.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0109.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x77 [0109.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x78 [0109.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0109.128] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0109.128] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0109.128] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0109.128] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0109.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0109.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0109.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0109.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpFilePart=0x0) returned 0x7d [0109.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpFilePart=0x0) returned 0x7e [0109.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0109.130] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.131] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.131] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.131] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.131] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.131] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.131] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.131] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.132] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.132] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0109.132] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0109.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0109.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0109.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0109.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpFilePart=0x0) returned 0x7d [0109.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpFilePart=0x0) returned 0x7e [0109.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0109.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.135] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.135] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.135] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.135] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0109.135] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0109.135] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0109.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0109.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0109.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.EnyBenied", lpFilePart=0x0) returned 0x8f [0109.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0109.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0109.139] GetFileType (hFile=0x248) returned 0x1 [0109.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0109.139] GetFileType (hFile=0x248) returned 0x1 [0109.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0109.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0109.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0109.650] GetFileType (hFile=0x240) returned 0x1 [0109.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0109.650] GetFileType (hFile=0x240) returned 0x1 [0109.650] ReadFile (in: hFile=0x240, lpBuffer=0x274ca50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x274ca50*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0109.677] ReadFile (in: hFile=0x240, lpBuffer=0x274ca50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x274ca50*, lpNumberOfBytesRead=0x1ad988*=0x378, lpOverlapped=0x0) returned 1 [0109.677] ReadFile (in: hFile=0x240, lpBuffer=0x274ca50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x274ca50*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0109.677] CloseHandle (hObject=0x240) returned 1 [0109.678] CloseHandle (hObject=0x248) returned 1 [0109.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0109.678] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png")) returned 1 [0109.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.EnyBenied", lpFilePart=0x0) returned 0xa1 [0109.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0109.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0109.680] GetFileType (hFile=0x248) returned 0x1 [0109.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0109.680] GetFileType (hFile=0x248) returned 0x1 [0110.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x97 [0110.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0110.183] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0110.185] GetFileType (hFile=0x240) returned 0x1 [0110.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0110.185] GetFileType (hFile=0x240) returned 0x1 [0110.185] ReadFile (in: hFile=0x240, lpBuffer=0x2693cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2693cc8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0110.195] WriteFile (in: hFile=0x248, lpBuffer=0x26921a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x26921a0*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0110.196] ReadFile (in: hFile=0x240, lpBuffer=0x2693cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2693cc8*, lpNumberOfBytesRead=0x1ad988*=0x103, lpOverlapped=0x0) returned 1 [0110.196] ReadFile (in: hFile=0x240, lpBuffer=0x2693cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2693cc8*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0110.196] CloseHandle (hObject=0x240) returned 1 [0110.197] WriteFile (in: hFile=0x248, lpBuffer=0x26921a0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x26921a0*, lpNumberOfBytesWritten=0x1ad858*=0x130, lpOverlapped=0x0) returned 1 [0110.197] CloseHandle (hObject=0x248) returned 1 [0110.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x97 [0110.197] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js")) returned 1 [0110.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.EnyBenied", lpFilePart=0x0) returned 0x9d [0110.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0110.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0110.200] GetFileType (hFile=0x248) returned 0x1 [0110.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0110.200] GetFileType (hFile=0x248) returned 0x1 [0110.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x93 [0110.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0110.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0110.876] GetFileType (hFile=0x240) returned 0x1 [0110.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0110.876] GetFileType (hFile=0x240) returned 0x1 [0110.876] ReadFile (in: hFile=0x240, lpBuffer=0x27dc3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27dc3c8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0110.886] WriteFile (in: hFile=0x248, lpBuffer=0x27da8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x27da8b0*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0110.887] ReadFile (in: hFile=0x240, lpBuffer=0x27dc3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27dc3c8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0110.888] WriteFile (in: hFile=0x248, lpBuffer=0x27da8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x27da8b0*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0110.888] ReadFile (in: hFile=0x240, lpBuffer=0x27dc3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27dc3c8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0110.888] WriteFile (in: hFile=0x248, lpBuffer=0x27da8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x27da8b0*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0110.888] ReadFile (in: hFile=0x240, lpBuffer=0x27dc3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27dc3c8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0110.889] WriteFile (in: hFile=0x248, lpBuffer=0x27da8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x27da8b0*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0110.889] ReadFile (in: hFile=0x240, lpBuffer=0x27dc3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27dc3c8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0110.889] WriteFile (in: hFile=0x248, lpBuffer=0x27da8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x27da8b0*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0110.889] ReadFile (in: hFile=0x240, lpBuffer=0x27dc3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27dc3c8*, lpNumberOfBytesRead=0x1ad988*=0xb6c, lpOverlapped=0x0) returned 1 [0110.889] ReadFile (in: hFile=0x240, lpBuffer=0x27dc31c, nNumberOfBytesToRead=0x94, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27dc31c*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0110.890] ReadFile (in: hFile=0x240, lpBuffer=0x27dc3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x27dc3c8*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0110.890] CloseHandle (hObject=0x240) returned 1 [0110.890] WriteFile (in: hFile=0x248, lpBuffer=0x27da8b0*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x27da8b0*, lpNumberOfBytesWritten=0x1ad858*=0xb90, lpOverlapped=0x0) returned 1 [0110.890] CloseHandle (hObject=0x248) returned 1 [0110.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x93 [0110.890] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js")) returned 1 [0110.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.EnyBenied", lpFilePart=0x0) returned 0x9c [0110.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0110.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0110.893] GetFileType (hFile=0x248) returned 0x1 [0110.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0110.893] GetFileType (hFile=0x248) returned 0x1 [0111.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x92 [0111.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0111.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0111.497] GetFileType (hFile=0x240) returned 0x1 [0111.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.497] GetFileType (hFile=0x240) returned 0x1 [0111.498] ReadFile (in: hFile=0x240, lpBuffer=0x2729750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2729750*, lpNumberOfBytesRead=0x1ad988*=0xe0, lpOverlapped=0x0) returned 1 [0111.499] ReadFile (in: hFile=0x240, lpBuffer=0x2729750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2729750*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0111.499] CloseHandle (hObject=0x240) returned 1 [0111.499] WriteFile (in: hFile=0x248, lpBuffer=0x2727c38*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2727c38*, lpNumberOfBytesWritten=0x1ad858*=0x110, lpOverlapped=0x0) returned 1 [0111.500] CloseHandle (hObject=0x248) returned 1 [0111.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x92 [0111.501] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js")) returned 1 [0111.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0111.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpFilePart=0x0) returned 0x86 [0111.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0111.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0111.504] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.505] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.505] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.505] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.505] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.505] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.505] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.506] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.506] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.506] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.506] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.506] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.506] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.507] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.507] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.507] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.507] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.507] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.507] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.508] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.508] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.508] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.508] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.508] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.509] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.512] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.513] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.516] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0111.517] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0111.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0111.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0111.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpFilePart=0x0) returned 0x86 [0111.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0111.518] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0111.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.520] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.521] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.521] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.521] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.521] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.521] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.521] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.521] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.522] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.522] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.522] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.522] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.522] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.522] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.523] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.524] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.525] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.526] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.526] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.526] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.526] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.526] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.526] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.526] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.526] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.529] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.529] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.529] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.529] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.529] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0111.529] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0111.529] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0111.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0111.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpFilePart=0x0) returned 0x89 [0111.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", lpFilePart=0x0) returned 0x8a [0111.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.533] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.533] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.533] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.533] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpFilePart=0x0) returned 0x89 [0111.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", lpFilePart=0x0) returned 0x8a [0111.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.536] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.538] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.539] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.539] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.542] GetFileType (hFile=0x248) returned 0x1 [0111.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.542] GetFileType (hFile=0x248) returned 0x1 [0111.543] WriteFile (in: hFile=0x248, lpBuffer=0x27533a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27533a8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.544] CloseHandle (hObject=0x248) returned 1 [0111.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.545] GetFileType (hFile=0x248) returned 0x1 [0111.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.545] GetFileType (hFile=0x248) returned 0x1 [0111.545] WriteFile (in: hFile=0x248, lpBuffer=0x2754508*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2754508*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0111.546] CloseHandle (hObject=0x248) returned 1 [0111.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.559] GetFileType (hFile=0x248) returned 0x1 [0111.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.559] GetFileType (hFile=0x248) returned 0x1 [0111.559] WriteFile (in: hFile=0x248, lpBuffer=0x275b348*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x275b348*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.560] CloseHandle (hObject=0x248) returned 1 [0111.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpFilePart=0x0) returned 0x89 [0111.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", lpFilePart=0x0) returned 0x8a [0111.561] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.561] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.561] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.561] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.561] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpFilePart=0x0) returned 0x89 [0111.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", lpFilePart=0x0) returned 0x8a [0111.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.562] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.562] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.563] GetFileType (hFile=0x248) returned 0x1 [0111.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.563] GetFileType (hFile=0x248) returned 0x1 [0111.563] WriteFile (in: hFile=0x248, lpBuffer=0x2768e78*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2768e78*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.564] CloseHandle (hObject=0x248) returned 1 [0111.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.565] GetFileType (hFile=0x248) returned 0x1 [0111.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.565] GetFileType (hFile=0x248) returned 0x1 [0111.565] WriteFile (in: hFile=0x248, lpBuffer=0x2769fd8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2769fd8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0111.566] CloseHandle (hObject=0x248) returned 1 [0111.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.579] GetFileType (hFile=0x248) returned 0x1 [0111.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.579] GetFileType (hFile=0x248) returned 0x1 [0111.579] WriteFile (in: hFile=0x248, lpBuffer=0x2770e18*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2770e18*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.580] CloseHandle (hObject=0x248) returned 1 [0111.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0111.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0111.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.581] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.581] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0111.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0111.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.582] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.582] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpFilePart=0x0) returned 0x89 [0111.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", lpFilePart=0x0) returned 0x8a [0111.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.612] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.612] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.612] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.612] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpFilePart=0x0) returned 0x89 [0111.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", lpFilePart=0x0) returned 0x8a [0111.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.613] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.613] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.613] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.613] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0111.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0111.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.631] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.631] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.631] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.631] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0111.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0111.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.632] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.632] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.632] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.632] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpFilePart=0x0) returned 0x89 [0111.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x8a [0111.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.647] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.647] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.647] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.647] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpFilePart=0x0) returned 0x89 [0111.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x8a [0111.648] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.648] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.648] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.648] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.648] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0111.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0111.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.668] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0111.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0111.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.669] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0111.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0111.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.690] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0111.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0111.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.691] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.691] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.693] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0111.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0111.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.713] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.713] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.713] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.713] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0111.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0111.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.714] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0111.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0111.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.756] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.756] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.756] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.756] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0111.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0111.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.757] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.758] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0111.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0111.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.783] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.783] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.783] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.783] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0111.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0111.784] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.784] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.785] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.808] GetFileType (hFile=0x248) returned 0x1 [0111.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.808] GetFileType (hFile=0x248) returned 0x1 [0111.808] WriteFile (in: hFile=0x248, lpBuffer=0x2639060*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2639060*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.809] CloseHandle (hObject=0x248) returned 1 [0111.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0111.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0111.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.810] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.810] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.810] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.810] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0111.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0111.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.811] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0111.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.812] GetFileType (hFile=0x248) returned 0x1 [0111.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.812] GetFileType (hFile=0x248) returned 0x1 [0111.813] WriteFile (in: hFile=0x248, lpBuffer=0x2646c70*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2646c70*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.814] CloseHandle (hObject=0x248) returned 1 [0111.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0111.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.814] GetFileType (hFile=0x248) returned 0x1 [0111.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.815] GetFileType (hFile=0x248) returned 0x1 [0111.815] WriteFile (in: hFile=0x248, lpBuffer=0x2647dd8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2647dd8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0111.816] CloseHandle (hObject=0x248) returned 1 [0111.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0111.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.818] GetFileType (hFile=0x248) returned 0x1 [0111.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.818] GetFileType (hFile=0x248) returned 0x1 [0111.818] WriteFile (in: hFile=0x248, lpBuffer=0x264ec20*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264ec20*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.819] CloseHandle (hObject=0x248) returned 1 [0111.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0111.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0111.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.820] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.820] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.821] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0111.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0111.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.821] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.822] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0111.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.822] GetFileType (hFile=0x248) returned 0x1 [0111.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.823] GetFileType (hFile=0x248) returned 0x1 [0111.823] WriteFile (in: hFile=0x248, lpBuffer=0x265c830*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265c830*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.823] CloseHandle (hObject=0x248) returned 1 [0111.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0111.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.824] GetFileType (hFile=0x248) returned 0x1 [0111.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.824] GetFileType (hFile=0x248) returned 0x1 [0111.824] WriteFile (in: hFile=0x248, lpBuffer=0x265d998*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x265d998*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0111.825] CloseHandle (hObject=0x248) returned 1 [0111.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0111.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.839] GetFileType (hFile=0x248) returned 0x1 [0111.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.839] GetFileType (hFile=0x248) returned 0x1 [0111.840] WriteFile (in: hFile=0x248, lpBuffer=0x26647e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26647e0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.840] CloseHandle (hObject=0x248) returned 1 [0111.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0111.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0111.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.841] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0111.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0111.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.842] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.843] GetFileType (hFile=0x248) returned 0x1 [0111.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.843] GetFileType (hFile=0x248) returned 0x1 [0111.844] WriteFile (in: hFile=0x248, lpBuffer=0x2672310*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2672310*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.844] CloseHandle (hObject=0x248) returned 1 [0111.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.845] GetFileType (hFile=0x248) returned 0x1 [0111.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.845] GetFileType (hFile=0x248) returned 0x1 [0111.845] WriteFile (in: hFile=0x248, lpBuffer=0x2673470*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2673470*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0111.847] CloseHandle (hObject=0x248) returned 1 [0111.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.854] GetFileType (hFile=0x248) returned 0x1 [0111.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.854] GetFileType (hFile=0x248) returned 0x1 [0111.854] WriteFile (in: hFile=0x248, lpBuffer=0x267a2b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x267a2b0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.855] CloseHandle (hObject=0x248) returned 1 [0111.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0111.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0111.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.859] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0111.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0111.859] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.860] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0111.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.861] GetFileType (hFile=0x248) returned 0x1 [0111.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.861] GetFileType (hFile=0x248) returned 0x1 [0111.861] WriteFile (in: hFile=0x248, lpBuffer=0x2687ee0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2687ee0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.862] CloseHandle (hObject=0x248) returned 1 [0111.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0111.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.862] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.863] GetFileType (hFile=0x248) returned 0x1 [0111.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.863] GetFileType (hFile=0x248) returned 0x1 [0111.863] WriteFile (in: hFile=0x248, lpBuffer=0x2689048*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2689048*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0111.864] CloseHandle (hObject=0x248) returned 1 [0111.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0111.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.866] GetFileType (hFile=0x248) returned 0x1 [0111.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.866] GetFileType (hFile=0x248) returned 0x1 [0111.866] WriteFile (in: hFile=0x248, lpBuffer=0x268fea0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x268fea0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.868] CloseHandle (hObject=0x248) returned 1 [0111.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0111.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0111.868] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.868] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.868] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.868] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.868] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0111.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0111.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.869] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.869] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.869] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.869] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.870] GetFileType (hFile=0x248) returned 0x1 [0111.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.870] GetFileType (hFile=0x248) returned 0x1 [0111.870] WriteFile (in: hFile=0x248, lpBuffer=0x269d9d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x269d9d0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.871] CloseHandle (hObject=0x248) returned 1 [0111.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.872] GetFileType (hFile=0x248) returned 0x1 [0111.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.872] GetFileType (hFile=0x248) returned 0x1 [0111.872] WriteFile (in: hFile=0x248, lpBuffer=0x269eb30*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x269eb30*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0111.873] CloseHandle (hObject=0x248) returned 1 [0111.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.884] GetFileType (hFile=0x248) returned 0x1 [0111.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.884] GetFileType (hFile=0x248) returned 0x1 [0111.884] WriteFile (in: hFile=0x248, lpBuffer=0x26a5970*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26a5970*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.885] CloseHandle (hObject=0x248) returned 1 [0111.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpFilePart=0x0) returned 0x89 [0111.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8a [0111.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.887] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpFilePart=0x0) returned 0x89 [0111.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8a [0111.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.887] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.888] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.889] GetFileType (hFile=0x248) returned 0x1 [0111.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.889] GetFileType (hFile=0x248) returned 0x1 [0111.890] WriteFile (in: hFile=0x248, lpBuffer=0x26b34a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26b34a0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.890] CloseHandle (hObject=0x248) returned 1 [0111.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.891] GetFileType (hFile=0x248) returned 0x1 [0111.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.891] GetFileType (hFile=0x248) returned 0x1 [0111.891] WriteFile (in: hFile=0x248, lpBuffer=0x26b4600*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26b4600*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0111.892] CloseHandle (hObject=0x248) returned 1 [0111.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.908] GetFileType (hFile=0x248) returned 0x1 [0111.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.908] GetFileType (hFile=0x248) returned 0x1 [0111.908] WriteFile (in: hFile=0x248, lpBuffer=0x26bb440*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26bb440*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0111.909] CloseHandle (hObject=0x248) returned 1 [0111.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpFilePart=0x0) returned 0x89 [0111.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x8a [0111.910] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0111.910] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpFilePart=0x0) returned 0x89 [0111.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x8a [0111.910] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0111.911] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0111.912] GetFileType (hFile=0x248) returned 0x1 [0111.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.912] GetFileType (hFile=0x248) returned 0x1 [0111.913] WriteFile (in: hFile=0x248, lpBuffer=0x26c8f70*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26c8f70*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0111.913] CloseHandle (hObject=0x248) returned 1 [0111.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0111.914] GetFileType (hFile=0x248) returned 0x1 [0111.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0111.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0111.933] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.934] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0111.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0111.934] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.935] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0111.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0111.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.943] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0111.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0111.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.943] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0111.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0111.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0111.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0111.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0111.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0111.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0111.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0111.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0111.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0111.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0111.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0111.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.951] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0111.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0111.951] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.952] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpFilePart=0x0) returned 0x8c [0111.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x8d [0111.958] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.960] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpFilePart=0x0) returned 0x8c [0111.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x8d [0111.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.961] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0111.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0111.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0111.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", lpFilePart=0x0) returned 0x89 [0111.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", lpFilePart=0x0) returned 0x8a [0111.967] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.968] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", lpFilePart=0x0) returned 0x89 [0111.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", lpFilePart=0x0) returned 0x8a [0111.968] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.969] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0111.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", lpFilePart=0x0) returned 0x89 [0111.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x8a [0111.982] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.983] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", lpFilePart=0x0) returned 0x89 [0111.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x8a [0111.983] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0111.984] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0111.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0111.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0111.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0112.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0112.002] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.002] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0112.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0112.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.003] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0112.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0112.009] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.010] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0112.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0112.010] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.010] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0112.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0112.016] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.016] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0112.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0112.017] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.017] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", lpFilePart=0x0) returned 0x89 [0112.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", lpFilePart=0x0) returned 0x8a [0112.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.024] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", lpFilePart=0x0) returned 0x89 [0112.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", lpFilePart=0x0) returned 0x8a [0112.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.024] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0112.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0112.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.030] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0112.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0112.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.031] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", lpFilePart=0x0) returned 0x89 [0112.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", lpFilePart=0x0) returned 0x8a [0112.036] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.037] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", lpFilePart=0x0) returned 0x89 [0112.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", lpFilePart=0x0) returned 0x8a [0112.038] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.038] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0112.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0112.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.044] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0112.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0112.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.044] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", lpFilePart=0x0) returned 0x89 [0112.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x8a [0112.050] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.051] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", lpFilePart=0x0) returned 0x89 [0112.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x8a [0112.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.051] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.057] WriteFile (in: hFile=0x248, lpBuffer=0x25fa7c8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x25fa7c8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.059] CloseHandle (hObject=0x248) returned 1 [0112.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.060] GetFileType (hFile=0x248) returned 0x1 [0112.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.060] GetFileType (hFile=0x248) returned 0x1 [0112.060] WriteFile (in: hFile=0x248, lpBuffer=0x25fb928*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x25fb928*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.061] CloseHandle (hObject=0x248) returned 1 [0112.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.064] GetFileType (hFile=0x248) returned 0x1 [0112.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.064] GetFileType (hFile=0x248) returned 0x1 [0112.064] WriteFile (in: hFile=0x248, lpBuffer=0x2602768*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2602768*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.065] CloseHandle (hObject=0x248) returned 1 [0112.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0112.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0112.065] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.066] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.066] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.066] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.066] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0112.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0112.067] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.067] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.067] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.067] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.067] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.071] GetFileType (hFile=0x248) returned 0x1 [0112.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.071] GetFileType (hFile=0x248) returned 0x1 [0112.072] WriteFile (in: hFile=0x248, lpBuffer=0x2610298*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2610298*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.073] CloseHandle (hObject=0x248) returned 1 [0112.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.074] GetFileType (hFile=0x248) returned 0x1 [0112.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.074] GetFileType (hFile=0x248) returned 0x1 [0112.074] WriteFile (in: hFile=0x248, lpBuffer=0x26113f8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26113f8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.075] CloseHandle (hObject=0x248) returned 1 [0112.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.078] GetFileType (hFile=0x248) returned 0x1 [0112.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.078] GetFileType (hFile=0x248) returned 0x1 [0112.078] WriteFile (in: hFile=0x248, lpBuffer=0x2618238*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2618238*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.079] CloseHandle (hObject=0x248) returned 1 [0112.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", lpFilePart=0x0) returned 0x89 [0112.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", lpFilePart=0x0) returned 0x8a [0112.079] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.081] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", lpFilePart=0x0) returned 0x89 [0112.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", lpFilePart=0x0) returned 0x8a [0112.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.082] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.082] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.084] GetFileType (hFile=0x248) returned 0x1 [0112.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.084] GetFileType (hFile=0x248) returned 0x1 [0112.085] WriteFile (in: hFile=0x248, lpBuffer=0x2625d68*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2625d68*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.086] CloseHandle (hObject=0x248) returned 1 [0112.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.087] GetFileType (hFile=0x248) returned 0x1 [0112.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.087] GetFileType (hFile=0x248) returned 0x1 [0112.087] WriteFile (in: hFile=0x248, lpBuffer=0x2626ec8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2626ec8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.088] CloseHandle (hObject=0x248) returned 1 [0112.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.091] GetFileType (hFile=0x248) returned 0x1 [0112.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.091] GetFileType (hFile=0x248) returned 0x1 [0112.091] WriteFile (in: hFile=0x248, lpBuffer=0x262dd08*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x262dd08*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.092] CloseHandle (hObject=0x248) returned 1 [0112.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", lpFilePart=0x0) returned 0x89 [0112.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", lpFilePart=0x0) returned 0x8a [0112.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.092] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.093] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.093] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.093] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", lpFilePart=0x0) returned 0x89 [0112.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", lpFilePart=0x0) returned 0x8a [0112.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.093] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.093] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.094] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.094] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.095] GetFileType (hFile=0x248) returned 0x1 [0112.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.095] GetFileType (hFile=0x248) returned 0x1 [0112.095] WriteFile (in: hFile=0x248, lpBuffer=0x263b838*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x263b838*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.096] CloseHandle (hObject=0x248) returned 1 [0112.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.097] GetFileType (hFile=0x248) returned 0x1 [0112.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.097] GetFileType (hFile=0x248) returned 0x1 [0112.097] WriteFile (in: hFile=0x248, lpBuffer=0x263c998*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x263c998*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.098] CloseHandle (hObject=0x248) returned 1 [0112.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.101] GetFileType (hFile=0x248) returned 0x1 [0112.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.101] GetFileType (hFile=0x248) returned 0x1 [0112.101] WriteFile (in: hFile=0x248, lpBuffer=0x26437d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26437d8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.111] CloseHandle (hObject=0x248) returned 1 [0112.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.113] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.113] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.113] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.113] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.114] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.114] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.114] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.114] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.114] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.115] GetFileType (hFile=0x248) returned 0x1 [0112.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.115] GetFileType (hFile=0x248) returned 0x1 [0112.116] WriteFile (in: hFile=0x248, lpBuffer=0x2651308*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2651308*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.117] CloseHandle (hObject=0x248) returned 1 [0112.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.118] GetFileType (hFile=0x248) returned 0x1 [0112.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.118] GetFileType (hFile=0x248) returned 0x1 [0112.118] WriteFile (in: hFile=0x248, lpBuffer=0x2652468*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2652468*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.119] CloseHandle (hObject=0x248) returned 1 [0112.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.122] GetFileType (hFile=0x248) returned 0x1 [0112.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.122] GetFileType (hFile=0x248) returned 0x1 [0112.122] WriteFile (in: hFile=0x248, lpBuffer=0x26592a8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26592a8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.123] CloseHandle (hObject=0x248) returned 1 [0112.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.124] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.125] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.126] GetFileType (hFile=0x248) returned 0x1 [0112.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.126] GetFileType (hFile=0x248) returned 0x1 [0112.126] WriteFile (in: hFile=0x248, lpBuffer=0x2666dd8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2666dd8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.128] CloseHandle (hObject=0x248) returned 1 [0112.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.128] GetFileType (hFile=0x248) returned 0x1 [0112.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.129] GetFileType (hFile=0x248) returned 0x1 [0112.129] WriteFile (in: hFile=0x248, lpBuffer=0x2667f38*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2667f38*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.130] CloseHandle (hObject=0x248) returned 1 [0112.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.132] GetFileType (hFile=0x248) returned 0x1 [0112.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.133] GetFileType (hFile=0x248) returned 0x1 [0112.133] WriteFile (in: hFile=0x248, lpBuffer=0x266ed78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x266ed78*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.134] CloseHandle (hObject=0x248) returned 1 [0112.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.135] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.135] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.135] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.135] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.136] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.136] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.136] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.136] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.137] GetFileType (hFile=0x248) returned 0x1 [0112.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.137] GetFileType (hFile=0x248) returned 0x1 [0112.138] WriteFile (in: hFile=0x248, lpBuffer=0x267c8a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x267c8a8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.139] CloseHandle (hObject=0x248) returned 1 [0112.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.140] GetFileType (hFile=0x248) returned 0x1 [0112.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.140] GetFileType (hFile=0x248) returned 0x1 [0112.140] WriteFile (in: hFile=0x248, lpBuffer=0x267da08*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x267da08*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.141] CloseHandle (hObject=0x248) returned 1 [0112.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.144] GetFileType (hFile=0x248) returned 0x1 [0112.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.144] GetFileType (hFile=0x248) returned 0x1 [0112.144] WriteFile (in: hFile=0x248, lpBuffer=0x2684848*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2684848*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.145] CloseHandle (hObject=0x248) returned 1 [0112.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.145] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.146] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.146] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.146] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.146] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.146] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.147] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.147] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.147] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.147] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.158] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.159] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.160] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.160] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.160] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.160] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.169] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.169] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.169] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.169] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.177] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.177] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.177] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.177] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.177] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.178] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.178] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.178] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.178] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.190] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.191] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.199] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.199] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.199] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.199] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.199] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.200] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.200] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.200] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.207] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.208] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.208] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.208] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.208] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.208] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.209] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.209] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.209] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.211] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.216] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.217] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.217] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.217] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.217] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.217] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.218] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.218] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.225] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.225] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.225] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.225] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.225] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.226] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.226] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.226] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.234] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.234] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.235] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.235] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.235] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.235] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.235] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.242] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.242] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.242] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.242] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.242] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.242] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.242] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.243] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.262] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.263] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.263] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.263] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.263] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.265] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.271] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.271] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.271] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.271] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.271] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.272] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.272] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.272] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.280] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.281] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.281] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.281] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.281] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.281] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.283] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.293] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.293] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.309] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.309] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.309] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.309] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.309] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.309] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.309] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.309] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.318] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.318] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.319] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.319] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.319] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.325] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.325] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.325] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.325] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.326] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.328] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.328] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.328] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.331] WriteFile (in: hFile=0x248, lpBuffer=0x2604948*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2604948*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.332] CloseHandle (hObject=0x248) returned 1 [0112.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.333] GetFileType (hFile=0x248) returned 0x1 [0112.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.333] GetFileType (hFile=0x248) returned 0x1 [0112.333] WriteFile (in: hFile=0x248, lpBuffer=0x2605aa8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2605aa8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.334] CloseHandle (hObject=0x248) returned 1 [0112.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.336] GetFileType (hFile=0x248) returned 0x1 [0112.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.336] GetFileType (hFile=0x248) returned 0x1 [0112.336] WriteFile (in: hFile=0x248, lpBuffer=0x260c8e8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x260c8e8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.337] CloseHandle (hObject=0x248) returned 1 [0112.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0112.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0112.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.337] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.338] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0112.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0112.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.338] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.341] GetFileType (hFile=0x248) returned 0x1 [0112.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.341] GetFileType (hFile=0x248) returned 0x1 [0112.341] WriteFile (in: hFile=0x248, lpBuffer=0x261a418*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261a418*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.342] CloseHandle (hObject=0x248) returned 1 [0112.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.342] GetFileType (hFile=0x248) returned 0x1 [0112.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.342] GetFileType (hFile=0x248) returned 0x1 [0112.343] WriteFile (in: hFile=0x248, lpBuffer=0x261b578*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x261b578*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.344] CloseHandle (hObject=0x248) returned 1 [0112.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.345] GetFileType (hFile=0x248) returned 0x1 [0112.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.346] GetFileType (hFile=0x248) returned 0x1 [0112.346] WriteFile (in: hFile=0x248, lpBuffer=0x26223b8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26223b8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.347] CloseHandle (hObject=0x248) returned 1 [0112.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", lpFilePart=0x0) returned 0x89 [0112.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x8a [0112.347] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.348] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", lpFilePart=0x0) returned 0x89 [0112.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x8a [0112.349] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.349] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.350] GetFileType (hFile=0x248) returned 0x1 [0112.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.350] GetFileType (hFile=0x248) returned 0x1 [0112.351] WriteFile (in: hFile=0x248, lpBuffer=0x262fee8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x262fee8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.352] CloseHandle (hObject=0x248) returned 1 [0112.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.352] GetFileType (hFile=0x248) returned 0x1 [0112.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.352] GetFileType (hFile=0x248) returned 0x1 [0112.352] WriteFile (in: hFile=0x248, lpBuffer=0x2631048*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2631048*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.353] CloseHandle (hObject=0x248) returned 1 [0112.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.355] GetFileType (hFile=0x248) returned 0x1 [0112.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.355] GetFileType (hFile=0x248) returned 0x1 [0112.355] WriteFile (in: hFile=0x248, lpBuffer=0x2637e88*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2637e88*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.356] CloseHandle (hObject=0x248) returned 1 [0112.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", lpFilePart=0x0) returned 0x89 [0112.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x8a [0112.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.357] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.357] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.357] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.357] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", lpFilePart=0x0) returned 0x89 [0112.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x8a [0112.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.358] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.358] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.359] GetFileType (hFile=0x248) returned 0x1 [0112.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.359] GetFileType (hFile=0x248) returned 0x1 [0112.359] WriteFile (in: hFile=0x248, lpBuffer=0x26459b8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26459b8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.360] CloseHandle (hObject=0x248) returned 1 [0112.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.361] GetFileType (hFile=0x248) returned 0x1 [0112.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.361] GetFileType (hFile=0x248) returned 0x1 [0112.361] WriteFile (in: hFile=0x248, lpBuffer=0x2646b18*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2646b18*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.362] CloseHandle (hObject=0x248) returned 1 [0112.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.364] GetFileType (hFile=0x248) returned 0x1 [0112.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.364] GetFileType (hFile=0x248) returned 0x1 [0112.364] WriteFile (in: hFile=0x248, lpBuffer=0x264d958*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264d958*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.365] CloseHandle (hObject=0x248) returned 1 [0112.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", lpFilePart=0x0) returned 0x89 [0112.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", lpFilePart=0x0) returned 0x8a [0112.365] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.366] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.366] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.366] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.366] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", lpFilePart=0x0) returned 0x89 [0112.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", lpFilePart=0x0) returned 0x8a [0112.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.367] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.367] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.368] GetFileType (hFile=0x248) returned 0x1 [0112.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.368] GetFileType (hFile=0x248) returned 0x1 [0112.368] WriteFile (in: hFile=0x248, lpBuffer=0x265b488*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265b488*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.369] CloseHandle (hObject=0x248) returned 1 [0112.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.369] GetFileType (hFile=0x248) returned 0x1 [0112.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.370] GetFileType (hFile=0x248) returned 0x1 [0112.370] WriteFile (in: hFile=0x248, lpBuffer=0x265c5e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x265c5e8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.371] CloseHandle (hObject=0x248) returned 1 [0112.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.372] GetFileType (hFile=0x248) returned 0x1 [0112.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.373] GetFileType (hFile=0x248) returned 0x1 [0112.373] WriteFile (in: hFile=0x248, lpBuffer=0x2663428*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2663428*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.373] CloseHandle (hObject=0x248) returned 1 [0112.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0112.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0112.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.374] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.374] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0112.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0112.375] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.375] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.375] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.375] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.375] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.376] GetFileType (hFile=0x248) returned 0x1 [0112.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.376] GetFileType (hFile=0x248) returned 0x1 [0112.377] WriteFile (in: hFile=0x248, lpBuffer=0x2670f58*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2670f58*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.378] CloseHandle (hObject=0x248) returned 1 [0112.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.378] GetFileType (hFile=0x248) returned 0x1 [0112.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.378] GetFileType (hFile=0x248) returned 0x1 [0112.378] WriteFile (in: hFile=0x248, lpBuffer=0x26720b8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26720b8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.380] CloseHandle (hObject=0x248) returned 1 [0112.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.381] GetFileType (hFile=0x248) returned 0x1 [0112.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.381] GetFileType (hFile=0x248) returned 0x1 [0112.382] WriteFile (in: hFile=0x248, lpBuffer=0x2678ef8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2678ef8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.383] CloseHandle (hObject=0x248) returned 1 [0112.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0112.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0112.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.385] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.385] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.385] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.385] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0112.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0112.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.386] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.386] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.386] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.386] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.387] GetFileType (hFile=0x248) returned 0x1 [0112.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.387] GetFileType (hFile=0x248) returned 0x1 [0112.387] WriteFile (in: hFile=0x248, lpBuffer=0x2686a28*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2686a28*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0112.388] CloseHandle (hObject=0x248) returned 1 [0112.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.389] GetFileType (hFile=0x248) returned 0x1 [0112.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.389] GetFileType (hFile=0x248) returned 0x1 [0112.389] WriteFile (in: hFile=0x248, lpBuffer=0x2687b88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2687b88*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0112.390] CloseHandle (hObject=0x248) returned 1 [0112.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.392] GetFileType (hFile=0x248) returned 0x1 [0112.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.392] GetFileType (hFile=0x248) returned 0x1 [0112.392] WriteFile (in: hFile=0x248, lpBuffer=0x268e9c8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x268e9c8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0112.393] CloseHandle (hObject=0x248) returned 1 [0112.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0112.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0112.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.393] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.393] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.393] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.393] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0112.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0112.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.394] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.394] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", lpFilePart=0x0) returned 0x89 [0112.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", lpFilePart=0x0) returned 0x8a [0112.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.403] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.403] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.403] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.403] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", lpFilePart=0x0) returned 0x89 [0112.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", lpFilePart=0x0) returned 0x8a [0112.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.404] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.404] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.404] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.404] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0112.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0112.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.411] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.411] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.412] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.412] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0112.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0112.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.412] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.412] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.412] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.412] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0112.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0112.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.432] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.432] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.432] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.432] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0112.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0112.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.432] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.433] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.433] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.433] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0112.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0112.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0112.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", lpFilePart=0x0) returned 0x8c [0112.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", lpFilePart=0x0) returned 0x8d [0112.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.440] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.440] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.440] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.440] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", lpFilePart=0x0) returned 0x8c [0112.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", lpFilePart=0x0) returned 0x8d [0112.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.441] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0112.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0112.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0112.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0112.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0112.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.450] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.450] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.450] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.450] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0112.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0112.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.451] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.451] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0112.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0112.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0112.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", lpFilePart=0x0) returned 0x89 [0112.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\", lpFilePart=0x0) returned 0x8a [0112.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.459] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.459] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.459] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.459] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", lpFilePart=0x0) returned 0x89 [0112.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\", lpFilePart=0x0) returned 0x8a [0112.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0112.460] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.460] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0112.460] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0112.460] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0112.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0112.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0112.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0112.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0112.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0112.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0112.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0112.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0112.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ENYBENY.TXT", lpFilePart=0x0) returned 0x92 [0112.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0112.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0112.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ENYBENY.png", lpFilePart=0x0) returned 0x92 [0112.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0112.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0112.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbd [0112.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0112.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0112.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0112.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", lpFilePart=0x0) returned 0x87 [0112.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0112.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0112.473] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0112.474] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0112.474] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0112.474] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0112.474] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0112.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0112.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0112.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", lpFilePart=0x0) returned 0x87 [0112.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0112.474] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0112.474] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0112.475] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0112.475] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0112.475] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0112.475] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0112.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0112.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ENYBENY.TXT", lpFilePart=0x0) returned 0x93 [0112.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0112.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0112.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ENYBENY.png", lpFilePart=0x0) returned 0x93 [0112.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0112.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0112.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbe [0112.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0112.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0112.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x89 [0112.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0112.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0112.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ENYBENY.png", lpFilePart=0x0) returned 0x89 [0112.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0112.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0112.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xb4 [0112.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0112.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0112.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x83 [0112.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0112.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0112.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.png", lpFilePart=0x0) returned 0x83 [0112.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0112.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0112.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0112.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xae [0112.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0112.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0112.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0112.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0112.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", lpFilePart=0x0) returned 0x77 [0112.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", lpFilePart=0x0) returned 0x78 [0112.506] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0112.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0112.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0112.510] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0112.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0112.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0112.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", lpFilePart=0x0) returned 0x77 [0112.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", lpFilePart=0x0) returned 0x78 [0112.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0112.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0112.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0112.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0112.511] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0112.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0112.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0112.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", lpFilePart=0x0) returned 0x81 [0112.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\", lpFilePart=0x0) returned 0x82 [0112.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0112.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.514] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.515] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0112.515] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0112.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0112.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0112.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", lpFilePart=0x0) returned 0x81 [0112.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\", lpFilePart=0x0) returned 0x82 [0112.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0112.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.517] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0112.517] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0112.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0112.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0112.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.EnyBenied", lpFilePart=0x0) returned 0x9e [0112.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0112.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0113.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", lpFilePart=0x0) returned 0x94 [0113.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0113.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0113.249] GetFileType (hFile=0x240) returned 0x1 [0113.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0113.249] GetFileType (hFile=0x240) returned 0x1 [0113.249] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.279] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.286] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.286] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.286] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.287] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.292] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.293] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.294] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.296] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.297] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.298] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.299] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.300] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.301] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.305] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.306] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.308] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.309] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.310] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.311] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.312] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.312] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.313] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.313] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.313] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.314] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.314] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.314] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.315] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.315] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.315] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.316] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.316] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.316] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.317] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.317] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.317] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.318] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.318] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.318] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.319] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.319] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.319] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.320] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.320] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.320] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.321] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.323] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.324] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.325] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0xa2e, lpOverlapped=0x0) returned 1 [0113.326] ReadFile (in: hFile=0x240, lpBuffer=0x26c3c4e, nNumberOfBytesToRead=0x1d2, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3c4e*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0113.327] ReadFile (in: hFile=0x240, lpBuffer=0x26c3e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c3e38*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0113.327] CloseHandle (hObject=0x240) returned 1 [0113.327] WriteFile (in: hFile=0x248, lpBuffer=0x26c2320*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x26c2320*, lpNumberOfBytesWritten=0x1ad858*=0xa50, lpOverlapped=0x0) returned 1 [0113.328] CloseHandle (hObject=0x248) returned 1 [0113.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", lpFilePart=0x0) returned 0x94 [0113.330] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js")) returned 1 [0113.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.EnyBenied", lpFilePart=0x0) returned 0x9a [0113.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0113.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0113.345] GetFileType (hFile=0x248) returned 0x1 [0113.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0113.346] GetFileType (hFile=0x248) returned 0x1 [0113.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x90 [0113.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0113.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0113.841] GetFileType (hFile=0x240) returned 0x1 [0113.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0113.841] GetFileType (hFile=0x240) returned 0x1 [0113.841] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.862] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.863] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.868] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.869] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.869] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.870] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.870] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.871] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.871] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.872] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.873] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.873] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.874] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.875] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.875] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.875] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.875] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.876] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.876] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.876] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.876] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.876] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.877] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.877] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.877] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.878] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.878] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.878] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.879] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.880] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.880] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.880] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.880] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.881] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.881] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.881] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.881] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.882] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.882] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.882] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.882] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.882] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.883] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.883] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.883] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.883] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.884] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.884] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.884] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.884] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.884] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.885] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.885] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.885] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.885] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.886] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.886] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.886] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.886] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.886] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.887] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.887] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.887] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.887] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.888] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.888] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.889] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.889] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.890] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.890] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.891] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.891] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.892] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.892] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.893] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.893] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.894] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.894] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.895] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.895] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.896] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.896] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.896] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.897] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.897] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.897] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.898] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.898] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.899] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.899] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.900] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.901] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.901] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.901] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.902] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.903] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.903] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.904] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.905] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.905] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.906] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.906] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.907] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.908] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.908] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.909] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.909] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.909] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.909] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.910] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.910] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.910] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.910] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.911] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.911] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.912] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0113.912] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0113.913] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x59, lpOverlapped=0x0) returned 1 [0113.913] ReadFile (in: hFile=0x240, lpBuffer=0x263f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f148*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0113.913] CloseHandle (hObject=0x240) returned 1 [0113.913] WriteFile (in: hFile=0x248, lpBuffer=0x263d640*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x263d640*, lpNumberOfBytesWritten=0x1ad858*=0x80, lpOverlapped=0x0) returned 1 [0113.913] CloseHandle (hObject=0x248) returned 1 [0113.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x90 [0113.913] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js")) returned 1 [0113.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0113.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x85 [0113.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", lpFilePart=0x0) returned 0x86 [0113.916] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0113.917] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0113.917] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0113.917] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0113.917] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0113.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0113.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0113.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0113.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x85 [0113.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", lpFilePart=0x0) returned 0x86 [0113.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0113.918] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0113.918] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0113.918] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0113.918] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0113.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0113.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0113.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.EnyBenied", lpFilePart=0x0) returned 0x9f [0113.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0113.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0113.920] GetFileType (hFile=0x248) returned 0x1 [0113.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0113.920] GetFileType (hFile=0x248) returned 0x1 [0114.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0114.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0114.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0114.521] GetFileType (hFile=0x240) returned 0x1 [0114.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0114.521] GetFileType (hFile=0x240) returned 0x1 [0114.521] ReadFile (in: hFile=0x240, lpBuffer=0x27c6a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27c6a08*, lpNumberOfBytesRead=0x1ad908*=0x6cd, lpOverlapped=0x0) returned 1 [0114.537] ReadFile (in: hFile=0x240, lpBuffer=0x27c68bd, nNumberOfBytesToRead=0x133, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27c68bd*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0114.538] ReadFile (in: hFile=0x240, lpBuffer=0x27c6a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27c6a08*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0114.538] CloseHandle (hObject=0x240) returned 1 [0114.538] WriteFile (in: hFile=0x248, lpBuffer=0x27c4ef8*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x27c4ef8*, lpNumberOfBytesWritten=0x1ad7d8*=0x6f0, lpOverlapped=0x0) returned 1 [0114.539] CloseHandle (hObject=0x248) returned 1 [0114.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0114.540] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css")) returned 1 [0114.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\ENYBENY.TXT", lpFilePart=0x0) returned 0x91 [0114.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0114.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0114.546] GetFileType (hFile=0x248) returned 0x1 [0114.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0114.546] GetFileType (hFile=0x248) returned 0x1 [0114.546] WriteFile (in: hFile=0x248, lpBuffer=0x27d1808*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x27d1808*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0114.548] CloseHandle (hObject=0x248) returned 1 [0114.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\ENYBENY.png", lpFilePart=0x0) returned 0x91 [0114.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0114.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0114.549] GetFileType (hFile=0x248) returned 0x1 [0114.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0114.549] GetFileType (hFile=0x248) returned 0x1 [0114.549] WriteFile (in: hFile=0x248, lpBuffer=0x27d2960*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x27d2960*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0114.550] CloseHandle (hObject=0x248) returned 1 [0114.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbc [0114.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0114.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0114.554] GetFileType (hFile=0x248) returned 0x1 [0114.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0114.554] GetFileType (hFile=0x248) returned 0x1 [0114.554] WriteFile (in: hFile=0x248, lpBuffer=0x27d9788*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x27d9788*, lpNumberOfBytesWritten=0x1ad818*=0xc6, lpOverlapped=0x0) returned 1 [0114.555] CloseHandle (hObject=0x248) returned 1 [0114.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0114.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x86 [0114.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", lpFilePart=0x0) returned 0x87 [0114.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0114.556] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0114.556] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0114.557] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0114.557] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0114.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0114.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0114.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0114.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x86 [0114.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", lpFilePart=0x0) returned 0x87 [0114.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0114.558] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0114.558] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0114.558] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0114.558] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0114.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0114.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0114.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.EnyBenied", lpFilePart=0x0) returned 0xa1 [0114.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0114.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0114.560] GetFileType (hFile=0x248) returned 0x1 [0114.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0114.561] GetFileType (hFile=0x248) returned 0x1 [0115.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0115.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0115.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0115.301] GetFileType (hFile=0x240) returned 0x1 [0115.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0115.302] GetFileType (hFile=0x240) returned 0x1 [0115.302] ReadFile (in: hFile=0x240, lpBuffer=0x2724968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2724968*, lpNumberOfBytesRead=0x1ad908*=0x32a, lpOverlapped=0x0) returned 1 [0115.318] ReadFile (in: hFile=0x240, lpBuffer=0x2724968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2724968*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0115.318] CloseHandle (hObject=0x240) returned 1 [0115.318] WriteFile (in: hFile=0x248, lpBuffer=0x2722e50*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x2722e50*, lpNumberOfBytesWritten=0x1ad7d8*=0x350, lpOverlapped=0x0) returned 1 [0115.320] CloseHandle (hObject=0x248) returned 1 [0115.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0115.320] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html")) returned 1 [0115.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\ENYBENY.TXT", lpFilePart=0x0) returned 0x92 [0115.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0115.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0115.324] GetFileType (hFile=0x248) returned 0x1 [0115.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0115.325] GetFileType (hFile=0x248) returned 0x1 [0115.325] WriteFile (in: hFile=0x248, lpBuffer=0x272f3b0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x272f3b0*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0115.326] CloseHandle (hObject=0x248) returned 1 [0115.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\ENYBENY.png", lpFilePart=0x0) returned 0x92 [0115.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0115.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0115.327] GetFileType (hFile=0x248) returned 0x1 [0115.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0115.327] GetFileType (hFile=0x248) returned 0x1 [0115.327] WriteFile (in: hFile=0x248, lpBuffer=0x2730508*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x2730508*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0115.328] CloseHandle (hObject=0x248) returned 1 [0115.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbd [0115.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0115.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0115.330] GetFileType (hFile=0x248) returned 0x1 [0115.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0115.330] GetFileType (hFile=0x248) returned 0x1 [0115.331] WriteFile (in: hFile=0x248, lpBuffer=0x2737330*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2737330*, lpNumberOfBytesWritten=0x1ad818*=0xc6, lpOverlapped=0x0) returned 1 [0115.332] CloseHandle (hObject=0x248) returned 1 [0115.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0115.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0115.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", lpFilePart=0x0) returned 0x89 [0115.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0115.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0115.335] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0115.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0115.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0115.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0115.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0115.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", lpFilePart=0x0) returned 0x89 [0115.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0115.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0115.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0115.339] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0115.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0115.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0115.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.EnyBenied", lpFilePart=0x0) returned 0x9f [0115.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0115.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0115.343] GetFileType (hFile=0x248) returned 0x1 [0115.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0115.343] GetFileType (hFile=0x248) returned 0x1 [0115.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0115.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0115.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0115.892] GetFileType (hFile=0x240) returned 0x1 [0115.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0115.892] GetFileType (hFile=0x240) returned 0x1 [0115.892] ReadFile (in: hFile=0x240, lpBuffer=0x2686160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2686160*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0115.904] ReadFile (in: hFile=0x240, lpBuffer=0x2686160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2686160*, lpNumberOfBytesRead=0x1ad908*=0x109, lpOverlapped=0x0) returned 1 [0115.904] ReadFile (in: hFile=0x240, lpBuffer=0x2686160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2686160*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0115.904] CloseHandle (hObject=0x240) returned 1 [0115.904] CloseHandle (hObject=0x248) returned 1 [0115.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0115.905] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png")) returned 1 [0115.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.EnyBenied", lpFilePart=0x0) returned 0x9e [0115.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0115.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0115.907] GetFileType (hFile=0x248) returned 0x1 [0115.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0115.907] GetFileType (hFile=0x248) returned 0x1 [0116.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0116.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0116.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0116.500] GetFileType (hFile=0x240) returned 0x1 [0116.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0116.500] GetFileType (hFile=0x240) returned 0x1 [0116.500] ReadFile (in: hFile=0x240, lpBuffer=0x27ce818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27ce818*, lpNumberOfBytesRead=0x1ad908*=0x22c, lpOverlapped=0x0) returned 1 [0116.502] ReadFile (in: hFile=0x240, lpBuffer=0x27ce818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27ce818*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0116.502] CloseHandle (hObject=0x240) returned 1 [0116.503] WriteFile (in: hFile=0x248, lpBuffer=0x27ccd10*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x27ccd10*, lpNumberOfBytesWritten=0x1ad7d8*=0x250, lpOverlapped=0x0) returned 1 [0116.504] CloseHandle (hObject=0x248) returned 1 [0116.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0116.504] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png")) returned 1 [0116.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.EnyBenied", lpFilePart=0x0) returned 0xad [0116.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0116.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0116.508] GetFileType (hFile=0x248) returned 0x1 [0116.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0116.508] GetFileType (hFile=0x248) returned 0x1 [0117.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0117.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0117.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0117.290] GetFileType (hFile=0x240) returned 0x1 [0117.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0117.290] GetFileType (hFile=0x240) returned 0x1 [0117.290] ReadFile (in: hFile=0x240, lpBuffer=0x2716108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2716108*, lpNumberOfBytesRead=0x1ad908*=0xa0, lpOverlapped=0x0) returned 1 [0117.291] ReadFile (in: hFile=0x240, lpBuffer=0x2716108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2716108*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0117.292] CloseHandle (hObject=0x240) returned 1 [0117.292] WriteFile (in: hFile=0x248, lpBuffer=0x27145c8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x27145c8*, lpNumberOfBytesWritten=0x1ad7d8*=0xd0, lpOverlapped=0x0) returned 1 [0117.293] CloseHandle (hObject=0x248) returned 1 [0117.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0117.294] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 1 [0117.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.EnyBenied", lpFilePart=0x0) returned 0xb3 [0117.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0117.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0117.297] GetFileType (hFile=0x248) returned 0x1 [0117.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0117.297] GetFileType (hFile=0x248) returned 0x1 [0117.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0117.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0117.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0117.860] GetFileType (hFile=0x240) returned 0x1 [0117.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0117.860] GetFileType (hFile=0x240) returned 0x1 [0117.860] ReadFile (in: hFile=0x240, lpBuffer=0x265d330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x265d330*, lpNumberOfBytesRead=0x1ad908*=0xfc, lpOverlapped=0x0) returned 1 [0117.861] ReadFile (in: hFile=0x240, lpBuffer=0x265d330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x265d330*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0117.861] CloseHandle (hObject=0x240) returned 1 [0117.862] WriteFile (in: hFile=0x248, lpBuffer=0x265b7d0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x265b7d0*, lpNumberOfBytesWritten=0x1ad7d8*=0x120, lpOverlapped=0x0) returned 1 [0117.863] CloseHandle (hObject=0x248) returned 1 [0117.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0117.863] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png")) returned 1 [0117.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.EnyBenied", lpFilePart=0x0) returned 0xb3 [0117.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0117.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0117.865] GetFileType (hFile=0x248) returned 0x1 [0117.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0117.866] GetFileType (hFile=0x248) returned 0x1 [0118.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0118.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0118.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0118.429] GetFileType (hFile=0x240) returned 0x1 [0118.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0118.429] GetFileType (hFile=0x240) returned 0x1 [0118.430] ReadFile (in: hFile=0x240, lpBuffer=0x27a2e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27a2e20*, lpNumberOfBytesRead=0x1ad908*=0xa0, lpOverlapped=0x0) returned 1 [0118.431] ReadFile (in: hFile=0x240, lpBuffer=0x27a2e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27a2e20*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0118.431] CloseHandle (hObject=0x240) returned 1 [0118.431] WriteFile (in: hFile=0x248, lpBuffer=0x27a12c0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x27a12c0*, lpNumberOfBytesWritten=0x1ad7d8*=0xd0, lpOverlapped=0x0) returned 1 [0118.432] CloseHandle (hObject=0x248) returned 1 [0118.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0118.433] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png")) returned 1 [0118.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.EnyBenied", lpFilePart=0x0) returned 0xb6 [0118.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0118.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0118.435] GetFileType (hFile=0x248) returned 0x1 [0118.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0118.436] GetFileType (hFile=0x248) returned 0x1 [0119.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0119.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0119.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0119.099] GetFileType (hFile=0x240) returned 0x1 [0119.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0119.099] GetFileType (hFile=0x240) returned 0x1 [0119.099] ReadFile (in: hFile=0x240, lpBuffer=0x26e88f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x26e88f0*, lpNumberOfBytesRead=0x1ad908*=0xa6, lpOverlapped=0x0) returned 1 [0119.101] ReadFile (in: hFile=0x240, lpBuffer=0x26e88f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x26e88f0*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0119.101] CloseHandle (hObject=0x240) returned 1 [0119.101] WriteFile (in: hFile=0x248, lpBuffer=0x26e6d88*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x26e6d88*, lpNumberOfBytesWritten=0x1ad7d8*=0xd0, lpOverlapped=0x0) returned 1 [0119.102] CloseHandle (hObject=0x248) returned 1 [0119.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0119.103] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png")) returned 1 [0119.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.EnyBenied", lpFilePart=0x0) returned 0xb5 [0119.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0119.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.106] GetFileType (hFile=0x248) returned 0x1 [0119.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0119.111] GetFileType (hFile=0x248) returned 0x1 [0119.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0119.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0119.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0119.660] GetFileType (hFile=0x240) returned 0x1 [0119.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0119.660] GetFileType (hFile=0x240) returned 0x1 [0119.660] ReadFile (in: hFile=0x240, lpBuffer=0x260f688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x260f688*, lpNumberOfBytesRead=0x1ad908*=0xa0, lpOverlapped=0x0) returned 1 [0119.662] ReadFile (in: hFile=0x240, lpBuffer=0x260f688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x260f688*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0119.662] CloseHandle (hObject=0x240) returned 1 [0119.662] WriteFile (in: hFile=0x248, lpBuffer=0x260db28*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x260db28*, lpNumberOfBytesWritten=0x1ad7d8*=0xd0, lpOverlapped=0x0) returned 1 [0119.663] CloseHandle (hObject=0x248) returned 1 [0119.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0119.663] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png")) returned 1 [0119.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ENYBENY.TXT", lpFilePart=0x0) returned 0x94 [0119.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0119.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.668] GetFileType (hFile=0x248) returned 0x1 [0119.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0119.668] GetFileType (hFile=0x248) returned 0x1 [0119.668] WriteFile (in: hFile=0x248, lpBuffer=0x2619e90*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2619e90*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0119.669] CloseHandle (hObject=0x248) returned 1 [0119.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ENYBENY.png", lpFilePart=0x0) returned 0x94 [0119.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0119.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.670] GetFileType (hFile=0x248) returned 0x1 [0119.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0119.670] GetFileType (hFile=0x248) returned 0x1 [0119.670] WriteFile (in: hFile=0x248, lpBuffer=0x261aff0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x261aff0*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0119.672] CloseHandle (hObject=0x248) returned 1 [0119.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbf [0119.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0119.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.673] GetFileType (hFile=0x248) returned 0x1 [0119.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0119.673] GetFileType (hFile=0x248) returned 0x1 [0119.673] WriteFile (in: hFile=0x248, lpBuffer=0x2621e20*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2621e20*, lpNumberOfBytesWritten=0x1ad818*=0xc6, lpOverlapped=0x0) returned 1 [0119.674] CloseHandle (hObject=0x248) returned 1 [0119.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0119.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0119.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", lpFilePart=0x0) returned 0x8b [0119.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0119.676] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.679] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.679] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.679] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.679] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.679] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.679] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.680] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.680] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.680] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.680] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.680] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.680] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.681] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.681] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.681] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.681] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.681] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.681] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.681] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.682] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.682] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.682] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.682] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.682] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.682] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.683] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.683] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.683] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0119.683] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0119.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0119.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0119.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0119.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", lpFilePart=0x0) returned 0x8b [0119.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0119.685] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.687] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.689] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0119.690] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0119.690] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0119.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0119.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0119.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8e [0119.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.693] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.693] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.693] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.693] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0119.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8e [0119.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.694] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.694] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.694] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.694] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.696] GetFileType (hFile=0x248) returned 0x1 [0119.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.696] GetFileType (hFile=0x248) returned 0x1 [0119.698] CloseHandle (hObject=0x248) returned 1 [0119.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.699] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.699] GetFileType (hFile=0x248) returned 0x1 [0119.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.700] GetFileType (hFile=0x248) returned 0x1 [0119.700] WriteFile (in: hFile=0x248, lpBuffer=0x2642758*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2642758*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0119.701] CloseHandle (hObject=0x248) returned 1 [0119.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.701] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.726] GetFileType (hFile=0x248) returned 0x1 [0119.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.726] GetFileType (hFile=0x248) returned 0x1 [0119.730] CloseHandle (hObject=0x248) returned 1 [0119.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0119.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8e [0119.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.733] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.733] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.733] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.733] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0119.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8e [0119.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.734] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.734] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.734] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.734] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.735] GetFileType (hFile=0x248) returned 0x1 [0119.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.736] GetFileType (hFile=0x248) returned 0x1 [0119.744] CloseHandle (hObject=0x248) returned 1 [0119.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.745] GetFileType (hFile=0x248) returned 0x1 [0119.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.745] GetFileType (hFile=0x248) returned 0x1 [0119.745] WriteFile (in: hFile=0x248, lpBuffer=0x2658348*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2658348*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0119.747] CloseHandle (hObject=0x248) returned 1 [0119.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.755] GetFileType (hFile=0x248) returned 0x1 [0119.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.756] GetFileType (hFile=0x248) returned 0x1 [0119.757] CloseHandle (hObject=0x248) returned 1 [0119.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0119.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8e [0119.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.761] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.762] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.763] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0119.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8e [0119.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.765] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.766] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.768] GetFileType (hFile=0x248) returned 0x1 [0119.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.768] GetFileType (hFile=0x248) returned 0x1 [0119.769] CloseHandle (hObject=0x248) returned 1 [0119.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.770] GetFileType (hFile=0x248) returned 0x1 [0119.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.770] GetFileType (hFile=0x248) returned 0x1 [0119.770] WriteFile (in: hFile=0x248, lpBuffer=0x266df38*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x266df38*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0119.772] CloseHandle (hObject=0x248) returned 1 [0119.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.792] GetFileType (hFile=0x248) returned 0x1 [0119.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.794] GetFileType (hFile=0x248) returned 0x1 [0119.795] CloseHandle (hObject=0x248) returned 1 [0119.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0119.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8e [0119.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.797] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.798] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0119.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8e [0119.798] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.799] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.799] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.799] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0119.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8e [0119.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.810] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.811] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.811] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0119.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8e [0119.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.812] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0119.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8e [0119.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.832] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.832] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.833] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.833] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0119.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8e [0119.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.833] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.833] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.833] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.833] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0119.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8e [0119.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.841] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.841] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0119.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8e [0119.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.842] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.842] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0119.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x91 [0119.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.854] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0119.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x91 [0119.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.854] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.855] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.855] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.855] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9c [0119.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\ENYBENY.png", lpFilePart=0x0) returned 0x9c [0119.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc7 [0119.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0119.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8e [0119.864] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.865] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.865] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.865] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.865] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0119.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8e [0119.866] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.866] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0119.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x92 [0119.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.875] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.875] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.875] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.875] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0119.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x92 [0119.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.876] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.876] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.876] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.876] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9d [0119.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\ENYBENY.png", lpFilePart=0x0) returned 0x9d [0119.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc8 [0119.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0119.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8e [0119.884] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.885] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0119.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8e [0119.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.885] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.886] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.886] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0119.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8e [0119.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.895] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.895] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0119.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8e [0119.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.896] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.896] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.896] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.896] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0119.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8f [0119.905] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.905] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0119.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8f [0119.906] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.906] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9a [0119.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x9a [0119.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc5 [0119.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0119.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8e [0119.917] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.918] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.918] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.918] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.919] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0119.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8e [0119.919] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.919] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.920] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.920] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.920] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0119.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8e [0119.929] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.930] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.930] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.930] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.930] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0119.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8e [0119.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.931] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.931] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.931] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.931] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0119.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8e [0119.941] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.942] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.943] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.943] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.943] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0119.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8e [0119.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.943] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.943] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.944] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.944] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0119.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8e [0119.954] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.954] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.954] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0119.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0119.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8e [0119.955] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0119.955] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.955] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0119.955] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0119.955] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0119.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0119.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0119.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0119.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0119.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0119.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0119.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0119.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0119.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0119.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0119.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0119.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0120.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8e [0120.000] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.001] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.001] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.001] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.001] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0120.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8e [0120.002] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.002] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.002] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.002] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.002] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0120.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8e [0120.010] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.010] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.010] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.010] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.010] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0120.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8e [0120.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.011] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.011] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0120.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8e [0120.019] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.020] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0120.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8e [0120.020] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.020] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.020] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0120.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8e [0120.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.028] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.028] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.028] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.028] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0120.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8e [0120.029] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.029] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.029] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.029] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.029] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.035] GetFileType (hFile=0x248) returned 0x1 [0120.035] GetFileType (hFile=0x248) returned 0x1 [0120.035] WriteFile (in: hFile=0x248, lpBuffer=0x25f74e0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x25f74e0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0120.036] CloseHandle (hObject=0x248) returned 1 [0120.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.037] GetFileType (hFile=0x248) returned 0x1 [0120.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.037] GetFileType (hFile=0x248) returned 0x1 [0120.037] WriteFile (in: hFile=0x248, lpBuffer=0x25f8648*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x25f8648*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0120.039] CloseHandle (hObject=0x248) returned 1 [0120.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.042] GetFileType (hFile=0x248) returned 0x1 [0120.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.042] GetFileType (hFile=0x248) returned 0x1 [0120.042] WriteFile (in: hFile=0x248, lpBuffer=0x25ff4a0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x25ff4a0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0120.043] CloseHandle (hObject=0x248) returned 1 [0120.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0120.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8e [0120.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.055] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.055] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.055] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.055] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0120.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8e [0120.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.056] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.056] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.057] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.057] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.062] GetFileType (hFile=0x248) returned 0x1 [0120.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.062] GetFileType (hFile=0x248) returned 0x1 [0120.063] WriteFile (in: hFile=0x248, lpBuffer=0x260d0d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x260d0d0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0120.064] CloseHandle (hObject=0x248) returned 1 [0120.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.066] GetFileType (hFile=0x248) returned 0x1 [0120.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.066] GetFileType (hFile=0x248) returned 0x1 [0120.066] WriteFile (in: hFile=0x248, lpBuffer=0x260e238*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x260e238*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0120.067] CloseHandle (hObject=0x248) returned 1 [0120.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.071] GetFileType (hFile=0x248) returned 0x1 [0120.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.071] GetFileType (hFile=0x248) returned 0x1 [0120.071] WriteFile (in: hFile=0x248, lpBuffer=0x2615090*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2615090*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0120.072] CloseHandle (hObject=0x248) returned 1 [0120.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0120.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8e [0120.073] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.073] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.074] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.074] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.074] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0120.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8e [0120.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.074] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.075] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.075] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.075] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.076] GetFileType (hFile=0x248) returned 0x1 [0120.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.076] GetFileType (hFile=0x248) returned 0x1 [0120.077] WriteFile (in: hFile=0x248, lpBuffer=0x2622cc0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2622cc0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0120.078] CloseHandle (hObject=0x248) returned 1 [0120.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.079] GetFileType (hFile=0x248) returned 0x1 [0120.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.079] GetFileType (hFile=0x248) returned 0x1 [0120.079] WriteFile (in: hFile=0x248, lpBuffer=0x2623e28*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2623e28*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0120.081] CloseHandle (hObject=0x248) returned 1 [0120.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.084] GetFileType (hFile=0x248) returned 0x1 [0120.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.084] GetFileType (hFile=0x248) returned 0x1 [0120.084] WriteFile (in: hFile=0x248, lpBuffer=0x262ac80*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x262ac80*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0120.085] CloseHandle (hObject=0x248) returned 1 [0120.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0120.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x8e [0120.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.087] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.087] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0120.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x8e [0120.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.088] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.088] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.090] GetFileType (hFile=0x248) returned 0x1 [0120.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.090] GetFileType (hFile=0x248) returned 0x1 [0120.090] WriteFile (in: hFile=0x248, lpBuffer=0x26388b0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26388b0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0120.092] CloseHandle (hObject=0x248) returned 1 [0120.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.093] GetFileType (hFile=0x248) returned 0x1 [0120.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.093] GetFileType (hFile=0x248) returned 0x1 [0120.093] WriteFile (in: hFile=0x248, lpBuffer=0x2639a18*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2639a18*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0120.094] CloseHandle (hObject=0x248) returned 1 [0120.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.095] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.097] GetFileType (hFile=0x248) returned 0x1 [0120.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.097] GetFileType (hFile=0x248) returned 0x1 [0120.097] WriteFile (in: hFile=0x248, lpBuffer=0x2640870*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2640870*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0120.098] CloseHandle (hObject=0x248) returned 1 [0120.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0120.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8e [0120.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.099] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0120.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8e [0120.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.100] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.102] GetFileType (hFile=0x248) returned 0x1 [0120.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.102] GetFileType (hFile=0x248) returned 0x1 [0120.102] WriteFile (in: hFile=0x248, lpBuffer=0x264e4a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264e4a0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0120.103] CloseHandle (hObject=0x248) returned 1 [0120.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.110] GetFileType (hFile=0x248) returned 0x1 [0120.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.110] GetFileType (hFile=0x248) returned 0x1 [0120.110] WriteFile (in: hFile=0x248, lpBuffer=0x264f608*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x264f608*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0120.112] CloseHandle (hObject=0x248) returned 1 [0120.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.117] GetFileType (hFile=0x248) returned 0x1 [0120.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.118] GetFileType (hFile=0x248) returned 0x1 [0120.118] WriteFile (in: hFile=0x248, lpBuffer=0x2656460*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2656460*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0120.119] CloseHandle (hObject=0x248) returned 1 [0120.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0120.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8e [0120.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.122] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.122] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0120.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8e [0120.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.124] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.125] GetFileType (hFile=0x248) returned 0x1 [0120.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.125] GetFileType (hFile=0x248) returned 0x1 [0120.126] WriteFile (in: hFile=0x248, lpBuffer=0x2664090*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2664090*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0120.127] CloseHandle (hObject=0x248) returned 1 [0120.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.129] GetFileType (hFile=0x248) returned 0x1 [0120.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.129] GetFileType (hFile=0x248) returned 0x1 [0120.129] WriteFile (in: hFile=0x248, lpBuffer=0x26651f8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26651f8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0120.131] CloseHandle (hObject=0x248) returned 1 [0120.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.135] GetFileType (hFile=0x248) returned 0x1 [0120.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.135] GetFileType (hFile=0x248) returned 0x1 [0120.135] WriteFile (in: hFile=0x248, lpBuffer=0x266c050*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x266c050*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0120.137] CloseHandle (hObject=0x248) returned 1 [0120.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0120.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x91 [0120.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.138] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.138] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.138] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.138] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0120.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x91 [0120.139] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.139] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.140] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.140] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.140] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9c [0120.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.141] GetFileType (hFile=0x248) returned 0x1 [0120.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.141] GetFileType (hFile=0x248) returned 0x1 [0120.142] WriteFile (in: hFile=0x248, lpBuffer=0x2679d60*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2679d60*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0120.143] CloseHandle (hObject=0x248) returned 1 [0120.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\ENYBENY.png", lpFilePart=0x0) returned 0x9c [0120.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.145] GetFileType (hFile=0x248) returned 0x1 [0120.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.145] GetFileType (hFile=0x248) returned 0x1 [0120.145] WriteFile (in: hFile=0x248, lpBuffer=0x267aed0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x267aed0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0120.147] CloseHandle (hObject=0x248) returned 1 [0120.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc7 [0120.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.150] GetFileType (hFile=0x248) returned 0x1 [0120.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.151] GetFileType (hFile=0x248) returned 0x1 [0120.152] WriteFile (in: hFile=0x248, lpBuffer=0x2681d30*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2681d30*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0120.153] CloseHandle (hObject=0x248) returned 1 [0120.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0120.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x91 [0120.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.155] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.155] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.156] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.156] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0120.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x91 [0120.156] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.157] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.157] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.157] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.157] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9c [0120.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\ENYBENY.png", lpFilePart=0x0) returned 0x9c [0120.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc7 [0120.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0120.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8e [0120.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.189] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.189] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.189] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.190] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0120.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8e [0120.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.191] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.191] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0120.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8e [0120.203] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.205] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.205] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.205] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.205] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0120.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8e [0120.206] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.206] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.206] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.207] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.207] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0120.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8e [0120.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.218] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.218] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.218] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.218] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0120.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8e [0120.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.219] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.219] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0120.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8e [0120.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.245] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.245] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.245] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.245] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0120.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8e [0120.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.246] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.246] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.246] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.246] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0120.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8e [0120.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.257] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.257] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.257] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.257] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0120.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8e [0120.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.258] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.258] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.258] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.258] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0120.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8e [0120.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.268] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.268] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0120.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8e [0120.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.269] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.269] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x99 [0120.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\ENYBENY.png", lpFilePart=0x0) returned 0x99 [0120.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc4 [0120.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x8d [0120.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8e [0120.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.279] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.279] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.279] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.280] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.281] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.283] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.290] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.290] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.291] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.291] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.300] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.300] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.300] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.301] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.301] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.327] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.327] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.328] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.328] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.328] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.328] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.338] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.339] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.339] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.339] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.347] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.348] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.348] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0120.348] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0120.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0120.349] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0120.349] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0120.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0120.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0120.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0120.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0120.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0120.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0120.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0120.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0120.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0120.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0120.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0120.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0120.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0120.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0120.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0120.365] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0120.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0120.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0120.365] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0120.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0120.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0120.366] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0120.366] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0120.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0120.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0120.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0120.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0120.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0120.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0120.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0120.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0120.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0120.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0120.389] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0120.389] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0120.390] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0120.390] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0120.390] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0120.390] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0120.403] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.403] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.404] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.404] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.406] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0120.407] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpFilePart=0x0) returned 0x7d [0120.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpFilePart=0x0) returned 0x7e [0120.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0120.409] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.409] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.409] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.409] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.409] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0120.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0120.410] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0120.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.EnyBenied", lpFilePart=0x0) returned 0x8f [0120.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0120.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0120.414] GetFileType (hFile=0x248) returned 0x1 [0120.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0120.414] GetFileType (hFile=0x248) returned 0x1 [0121.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0121.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0121.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0121.058] GetFileType (hFile=0x240) returned 0x1 [0121.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.058] GetFileType (hFile=0x240) returned 0x1 [0121.058] ReadFile (in: hFile=0x240, lpBuffer=0x2737c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2737c40*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0121.078] WriteFile (in: hFile=0x248, lpBuffer=0x2736160*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2736160*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0121.084] ReadFile (in: hFile=0x240, lpBuffer=0x2737c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2737c40*, lpNumberOfBytesRead=0x1ad988*=0x80f, lpOverlapped=0x0) returned 1 [0121.090] ReadFile (in: hFile=0x240, lpBuffer=0x2737837, nNumberOfBytesToRead=0x3f1, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2737837*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0121.090] ReadFile (in: hFile=0x240, lpBuffer=0x2737c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2737c40*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0121.090] CloseHandle (hObject=0x240) returned 1 [0121.091] WriteFile (in: hFile=0x248, lpBuffer=0x2736160*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2736160*, lpNumberOfBytesWritten=0x1ad858*=0x830, lpOverlapped=0x0) returned 1 [0121.091] CloseHandle (hObject=0x248) returned 1 [0121.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0121.093] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 1 [0121.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0121.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0121.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0121.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0121.097] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.097] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.101] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.102] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.102] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.102] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.102] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.115] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.115] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.115] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.115] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.117] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0121.117] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0121.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0121.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0121.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0121.120] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0121.126] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0121.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0121.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0121.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0121.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.129] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.129] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.129] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.129] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0121.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0121.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.130] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.130] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.130] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.130] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.133] GetFileType (hFile=0x248) returned 0x1 [0121.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.134] GetFileType (hFile=0x248) returned 0x1 [0121.134] WriteFile (in: hFile=0x248, lpBuffer=0x2757be0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2757be0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.135] CloseHandle (hObject=0x248) returned 1 [0121.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.136] GetFileType (hFile=0x248) returned 0x1 [0121.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.136] GetFileType (hFile=0x248) returned 0x1 [0121.136] WriteFile (in: hFile=0x248, lpBuffer=0x2758d40*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2758d40*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.137] CloseHandle (hObject=0x248) returned 1 [0121.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.140] GetFileType (hFile=0x248) returned 0x1 [0121.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.140] GetFileType (hFile=0x248) returned 0x1 [0121.140] WriteFile (in: hFile=0x248, lpBuffer=0x275fb80*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x275fb80*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.141] CloseHandle (hObject=0x248) returned 1 [0121.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0121.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0121.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.142] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.142] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.142] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.142] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0121.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0121.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.142] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.143] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.143] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.143] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.144] GetFileType (hFile=0x248) returned 0x1 [0121.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.144] GetFileType (hFile=0x248) returned 0x1 [0121.145] WriteFile (in: hFile=0x248, lpBuffer=0x276d6b0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x276d6b0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.146] CloseHandle (hObject=0x248) returned 1 [0121.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.146] GetFileType (hFile=0x248) returned 0x1 [0121.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.147] GetFileType (hFile=0x248) returned 0x1 [0121.147] WriteFile (in: hFile=0x248, lpBuffer=0x276e810*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x276e810*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.148] CloseHandle (hObject=0x248) returned 1 [0121.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.152] GetFileType (hFile=0x248) returned 0x1 [0121.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.152] GetFileType (hFile=0x248) returned 0x1 [0121.152] WriteFile (in: hFile=0x248, lpBuffer=0x2775650*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2775650*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.154] CloseHandle (hObject=0x248) returned 1 [0121.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0121.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0121.155] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.157] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.158] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.158] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.158] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0121.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0121.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.159] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.160] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.161] GetFileType (hFile=0x248) returned 0x1 [0121.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.161] GetFileType (hFile=0x248) returned 0x1 [0121.162] WriteFile (in: hFile=0x248, lpBuffer=0x2783180*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2783180*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.163] CloseHandle (hObject=0x248) returned 1 [0121.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.165] GetFileType (hFile=0x248) returned 0x1 [0121.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.165] GetFileType (hFile=0x248) returned 0x1 [0121.165] WriteFile (in: hFile=0x248, lpBuffer=0x27842e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27842e0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.167] CloseHandle (hObject=0x248) returned 1 [0121.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.171] GetFileType (hFile=0x248) returned 0x1 [0121.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.172] GetFileType (hFile=0x248) returned 0x1 [0121.172] WriteFile (in: hFile=0x248, lpBuffer=0x278b120*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x278b120*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.174] CloseHandle (hObject=0x248) returned 1 [0121.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0121.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0121.174] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.176] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.177] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.177] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.177] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0121.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0121.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.179] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.179] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.179] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.179] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.182] GetFileType (hFile=0x248) returned 0x1 [0121.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.182] GetFileType (hFile=0x248) returned 0x1 [0121.182] WriteFile (in: hFile=0x248, lpBuffer=0x2798c50*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2798c50*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.184] CloseHandle (hObject=0x248) returned 1 [0121.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.189] GetFileType (hFile=0x248) returned 0x1 [0121.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.189] GetFileType (hFile=0x248) returned 0x1 [0121.189] WriteFile (in: hFile=0x248, lpBuffer=0x2799db0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2799db0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.191] CloseHandle (hObject=0x248) returned 1 [0121.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.197] GetFileType (hFile=0x248) returned 0x1 [0121.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.197] GetFileType (hFile=0x248) returned 0x1 [0121.197] WriteFile (in: hFile=0x248, lpBuffer=0x27a0bf0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27a0bf0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.198] CloseHandle (hObject=0x248) returned 1 [0121.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0121.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0121.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.200] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.200] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.200] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.200] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0121.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0121.201] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.201] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.201] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.201] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.201] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0121.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0121.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.213] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.213] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.213] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.214] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0121.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0121.214] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.214] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.214] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.214] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.214] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0121.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0121.244] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.248] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.250] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0121.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0121.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.253] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.253] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.254] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.254] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0121.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8a [0121.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.301] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0121.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8a [0121.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.303] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.332] WriteFile (in: hFile=0x248, lpBuffer=0x25fc370*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x25fc370*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.333] CloseHandle (hObject=0x248) returned 1 [0121.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0121.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0121.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.334] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.335] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0121.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0121.335] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.335] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.336] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.336] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.340] GetFileType (hFile=0x248) returned 0x1 [0121.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.340] GetFileType (hFile=0x248) returned 0x1 [0121.340] WriteFile (in: hFile=0x248, lpBuffer=0x2609ea0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2609ea0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.341] CloseHandle (hObject=0x248) returned 1 [0121.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.342] GetFileType (hFile=0x248) returned 0x1 [0121.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.342] GetFileType (hFile=0x248) returned 0x1 [0121.343] WriteFile (in: hFile=0x248, lpBuffer=0x260b000*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x260b000*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.344] CloseHandle (hObject=0x248) returned 1 [0121.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.346] GetFileType (hFile=0x248) returned 0x1 [0121.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.346] GetFileType (hFile=0x248) returned 0x1 [0121.347] WriteFile (in: hFile=0x248, lpBuffer=0x2611e40*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2611e40*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.348] CloseHandle (hObject=0x248) returned 1 [0121.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0121.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0121.349] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.355] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.355] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.355] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.355] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0121.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0121.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.356] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.356] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.356] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.356] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.359] GetFileType (hFile=0x248) returned 0x1 [0121.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.359] GetFileType (hFile=0x248) returned 0x1 [0121.360] WriteFile (in: hFile=0x248, lpBuffer=0x261f970*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261f970*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.361] CloseHandle (hObject=0x248) returned 1 [0121.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.361] GetFileType (hFile=0x248) returned 0x1 [0121.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.362] GetFileType (hFile=0x248) returned 0x1 [0121.362] WriteFile (in: hFile=0x248, lpBuffer=0x2620ad0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2620ad0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.363] CloseHandle (hObject=0x248) returned 1 [0121.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.365] GetFileType (hFile=0x248) returned 0x1 [0121.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.365] GetFileType (hFile=0x248) returned 0x1 [0121.366] WriteFile (in: hFile=0x248, lpBuffer=0x2627910*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2627910*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.367] CloseHandle (hObject=0x248) returned 1 [0121.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0121.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0121.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.368] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.368] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.368] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.368] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0121.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0121.369] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.369] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.369] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x96 [0121.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.371] GetFileType (hFile=0x248) returned 0x1 [0121.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.371] GetFileType (hFile=0x248) returned 0x1 [0121.371] WriteFile (in: hFile=0x248, lpBuffer=0x26354d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26354d0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.372] CloseHandle (hObject=0x248) returned 1 [0121.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x96 [0121.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.373] GetFileType (hFile=0x248) returned 0x1 [0121.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.373] GetFileType (hFile=0x248) returned 0x1 [0121.373] WriteFile (in: hFile=0x248, lpBuffer=0x2636630*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2636630*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.374] CloseHandle (hObject=0x248) returned 1 [0121.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc1 [0121.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.376] GetFileType (hFile=0x248) returned 0x1 [0121.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.376] GetFileType (hFile=0x248) returned 0x1 [0121.376] WriteFile (in: hFile=0x248, lpBuffer=0x263d470*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x263d470*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.377] CloseHandle (hObject=0x248) returned 1 [0121.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0121.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0121.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.378] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.378] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0121.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0121.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.379] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.379] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.379] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.379] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.380] GetFileType (hFile=0x248) returned 0x1 [0121.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.380] GetFileType (hFile=0x248) returned 0x1 [0121.380] WriteFile (in: hFile=0x248, lpBuffer=0x264afa0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264afa0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.381] CloseHandle (hObject=0x248) returned 1 [0121.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.382] GetFileType (hFile=0x248) returned 0x1 [0121.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.382] GetFileType (hFile=0x248) returned 0x1 [0121.382] WriteFile (in: hFile=0x248, lpBuffer=0x264c100*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x264c100*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.383] CloseHandle (hObject=0x248) returned 1 [0121.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.385] GetFileType (hFile=0x248) returned 0x1 [0121.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.385] GetFileType (hFile=0x248) returned 0x1 [0121.385] WriteFile (in: hFile=0x248, lpBuffer=0x2652f40*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2652f40*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.386] CloseHandle (hObject=0x248) returned 1 [0121.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0121.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0121.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.387] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.387] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.387] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.387] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0121.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0121.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.388] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.388] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.389] GetFileType (hFile=0x248) returned 0x1 [0121.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.389] GetFileType (hFile=0x248) returned 0x1 [0121.389] WriteFile (in: hFile=0x248, lpBuffer=0x2660a70*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2660a70*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.390] CloseHandle (hObject=0x248) returned 1 [0121.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.391] GetFileType (hFile=0x248) returned 0x1 [0121.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.391] GetFileType (hFile=0x248) returned 0x1 [0121.391] WriteFile (in: hFile=0x248, lpBuffer=0x2661bd0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2661bd0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.392] CloseHandle (hObject=0x248) returned 1 [0121.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.402] GetFileType (hFile=0x248) returned 0x1 [0121.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.402] GetFileType (hFile=0x248) returned 0x1 [0121.402] WriteFile (in: hFile=0x248, lpBuffer=0x2668a10*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2668a10*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.403] CloseHandle (hObject=0x248) returned 1 [0121.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0121.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0121.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.403] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.403] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.403] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.404] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0121.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0121.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.404] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.404] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.404] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.404] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.406] GetFileType (hFile=0x248) returned 0x1 [0121.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.406] GetFileType (hFile=0x248) returned 0x1 [0121.406] WriteFile (in: hFile=0x248, lpBuffer=0x2676540*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2676540*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.407] CloseHandle (hObject=0x248) returned 1 [0121.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.408] GetFileType (hFile=0x248) returned 0x1 [0121.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.408] GetFileType (hFile=0x248) returned 0x1 [0121.408] WriteFile (in: hFile=0x248, lpBuffer=0x26776a0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26776a0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.410] CloseHandle (hObject=0x248) returned 1 [0121.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.413] GetFileType (hFile=0x248) returned 0x1 [0121.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.413] GetFileType (hFile=0x248) returned 0x1 [0121.413] WriteFile (in: hFile=0x248, lpBuffer=0x267e4e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x267e4e0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.414] CloseHandle (hObject=0x248) returned 1 [0121.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0121.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0121.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.415] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.415] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.415] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.416] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0121.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0121.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.416] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.416] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.416] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.417] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.423] GetFileType (hFile=0x248) returned 0x1 [0121.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.423] GetFileType (hFile=0x248) returned 0x1 [0121.423] WriteFile (in: hFile=0x248, lpBuffer=0x268c010*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x268c010*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.425] CloseHandle (hObject=0x248) returned 1 [0121.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.426] GetFileType (hFile=0x248) returned 0x1 [0121.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.426] GetFileType (hFile=0x248) returned 0x1 [0121.426] WriteFile (in: hFile=0x248, lpBuffer=0x268d170*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x268d170*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.427] CloseHandle (hObject=0x248) returned 1 [0121.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0121.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0121.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.434] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.434] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0121.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0121.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.435] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.435] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0121.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0121.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.447] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.448] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.448] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.448] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0121.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0121.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.449] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.449] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.449] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.449] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0121.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0121.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.460] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.460] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.460] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.460] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0121.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0121.461] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.461] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.462] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.462] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0121.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0121.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.490] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0121.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0121.491] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.491] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.491] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0121.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0121.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.500] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.500] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.500] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.500] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0121.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0121.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.501] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.501] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.501] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.501] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0121.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0121.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.510] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0121.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0121.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.510] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.511] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.511] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0121.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0121.518] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.518] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.519] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0121.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0121.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.519] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.519] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0121.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0121.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.527] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.528] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0121.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0121.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.528] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.529] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0121.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0121.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.537] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0121.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0121.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.538] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.538] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.538] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.538] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0121.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0121.546] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.549] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.549] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.549] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.549] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0121.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0121.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.549] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.550] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.550] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.550] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0121.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0121.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0121.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0121.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0121.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.559] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.559] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.559] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.559] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0121.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0121.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.560] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.560] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.560] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.560] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0121.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0121.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0121.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0121.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0121.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.609] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.609] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.609] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.609] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0121.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0121.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.610] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.610] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.612] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0121.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0121.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.660] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.660] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.660] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.660] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0121.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0121.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.661] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.661] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x89 [0121.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", lpFilePart=0x0) returned 0x8a [0121.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.669] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x89 [0121.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", lpFilePart=0x0) returned 0x8a [0121.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.669] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0121.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0121.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.677] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.677] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0121.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0121.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.678] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.678] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0121.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0121.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.686] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0121.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0121.686] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.686] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.686] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0121.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0121.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.694] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.694] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.694] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.694] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0121.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0121.695] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.695] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.695] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.695] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.695] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.705] WriteFile (in: hFile=0x248, lpBuffer=0x25fcdd0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x25fcdd0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.706] CloseHandle (hObject=0x248) returned 1 [0121.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.707] GetFileType (hFile=0x248) returned 0x1 [0121.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.707] GetFileType (hFile=0x248) returned 0x1 [0121.707] WriteFile (in: hFile=0x248, lpBuffer=0x25fdf30*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x25fdf30*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.709] CloseHandle (hObject=0x248) returned 1 [0121.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.712] GetFileType (hFile=0x248) returned 0x1 [0121.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.712] GetFileType (hFile=0x248) returned 0x1 [0121.712] WriteFile (in: hFile=0x248, lpBuffer=0x2604d70*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2604d70*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.713] CloseHandle (hObject=0x248) returned 1 [0121.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0121.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0121.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.714] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.714] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0121.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0121.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.715] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.715] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.715] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.716] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.720] GetFileType (hFile=0x248) returned 0x1 [0121.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.720] GetFileType (hFile=0x248) returned 0x1 [0121.721] WriteFile (in: hFile=0x248, lpBuffer=0x26128a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26128a0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.722] CloseHandle (hObject=0x248) returned 1 [0121.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.723] GetFileType (hFile=0x248) returned 0x1 [0121.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.723] GetFileType (hFile=0x248) returned 0x1 [0121.723] WriteFile (in: hFile=0x248, lpBuffer=0x2613a00*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2613a00*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.725] CloseHandle (hObject=0x248) returned 1 [0121.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.745] GetFileType (hFile=0x248) returned 0x1 [0121.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.745] GetFileType (hFile=0x248) returned 0x1 [0121.745] WriteFile (in: hFile=0x248, lpBuffer=0x261a840*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261a840*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.746] CloseHandle (hObject=0x248) returned 1 [0121.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0121.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0121.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.747] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.747] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.747] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.747] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0121.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0121.747] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.748] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.748] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.748] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.748] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.751] GetFileType (hFile=0x248) returned 0x1 [0121.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.751] GetFileType (hFile=0x248) returned 0x1 [0121.752] WriteFile (in: hFile=0x248, lpBuffer=0x2628370*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2628370*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.753] CloseHandle (hObject=0x248) returned 1 [0121.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\ENYBENY.png", lpFilePart=0x0) returned 0x95 [0121.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.754] GetFileType (hFile=0x248) returned 0x1 [0121.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.754] GetFileType (hFile=0x248) returned 0x1 [0121.754] WriteFile (in: hFile=0x248, lpBuffer=0x26294d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26294d0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.756] CloseHandle (hObject=0x248) returned 1 [0121.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc0 [0121.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.796] GetFileType (hFile=0x248) returned 0x1 [0121.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.796] GetFileType (hFile=0x248) returned 0x1 [0121.796] WriteFile (in: hFile=0x248, lpBuffer=0x2630310*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2630310*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.797] CloseHandle (hObject=0x248) returned 1 [0121.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0121.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0121.798] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.798] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.799] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0121.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0121.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.800] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.801] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.801] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x95 [0121.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.804] GetFileType (hFile=0x248) returned 0x1 [0121.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.804] GetFileType (hFile=0x248) returned 0x1 [0121.804] WriteFile (in: hFile=0x248, lpBuffer=0x263de40*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x263de40*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.809] CloseHandle (hObject=0x248) returned 1 [0121.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.810] GetFileType (hFile=0x248) returned 0x1 [0121.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.810] GetFileType (hFile=0x248) returned 0x1 [0121.810] WriteFile (in: hFile=0x248, lpBuffer=0x263efa0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x263efa0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.812] CloseHandle (hObject=0x248) returned 1 [0121.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.817] GetFileType (hFile=0x248) returned 0x1 [0121.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.817] GetFileType (hFile=0x248) returned 0x1 [0121.817] WriteFile (in: hFile=0x248, lpBuffer=0x2645de0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2645de0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.818] CloseHandle (hObject=0x248) returned 1 [0121.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.819] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.819] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.820] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.820] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.820] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.821] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.822] GetFileType (hFile=0x248) returned 0x1 [0121.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.822] GetFileType (hFile=0x248) returned 0x1 [0121.822] WriteFile (in: hFile=0x248, lpBuffer=0x2653910*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2653910*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.823] CloseHandle (hObject=0x248) returned 1 [0121.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.824] GetFileType (hFile=0x248) returned 0x1 [0121.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.824] GetFileType (hFile=0x248) returned 0x1 [0121.824] WriteFile (in: hFile=0x248, lpBuffer=0x2654a70*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2654a70*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.826] CloseHandle (hObject=0x248) returned 1 [0121.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.829] GetFileType (hFile=0x248) returned 0x1 [0121.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.829] GetFileType (hFile=0x248) returned 0x1 [0121.829] WriteFile (in: hFile=0x248, lpBuffer=0x265b8b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265b8b0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.830] CloseHandle (hObject=0x248) returned 1 [0121.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.831] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.831] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.831] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.831] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.832] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.832] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.832] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.832] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.833] GetFileType (hFile=0x248) returned 0x1 [0121.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.833] GetFileType (hFile=0x248) returned 0x1 [0121.834] WriteFile (in: hFile=0x248, lpBuffer=0x26694c0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26694c0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.835] CloseHandle (hObject=0x248) returned 1 [0121.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.836] GetFileType (hFile=0x248) returned 0x1 [0121.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.836] GetFileType (hFile=0x248) returned 0x1 [0121.836] WriteFile (in: hFile=0x248, lpBuffer=0x266a628*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x266a628*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.838] CloseHandle (hObject=0x248) returned 1 [0121.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.841] GetFileType (hFile=0x248) returned 0x1 [0121.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.841] GetFileType (hFile=0x248) returned 0x1 [0121.841] WriteFile (in: hFile=0x248, lpBuffer=0x2671470*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2671470*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.842] CloseHandle (hObject=0x248) returned 1 [0121.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.843] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.843] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0121.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0121.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0121.844] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0121.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0121.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.845] GetFileType (hFile=0x248) returned 0x1 [0121.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.845] GetFileType (hFile=0x248) returned 0x1 [0121.846] WriteFile (in: hFile=0x248, lpBuffer=0x267f080*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x267f080*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0121.847] CloseHandle (hObject=0x248) returned 1 [0121.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0121.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.848] GetFileType (hFile=0x248) returned 0x1 [0121.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0121.848] GetFileType (hFile=0x248) returned 0x1 [0121.848] WriteFile (in: hFile=0x248, lpBuffer=0x26801e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26801e8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0121.849] CloseHandle (hObject=0x248) returned 1 [0121.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0121.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.852] GetFileType (hFile=0x248) returned 0x1 [0121.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0121.852] GetFileType (hFile=0x248) returned 0x1 [0121.852] WriteFile (in: hFile=0x248, lpBuffer=0x2687030*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2687030*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0121.853] CloseHandle (hObject=0x248) returned 1 [0121.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0121.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.854] GetFileType (hFile=0x248) returned 0x1 [0121.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0121.854] GetFileType (hFile=0x248) returned 0x1 [0121.855] WriteFile (in: hFile=0x248, lpBuffer=0x2691588*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2691588*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0121.856] CloseHandle (hObject=0x248) returned 1 [0121.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0121.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.857] GetFileType (hFile=0x248) returned 0x1 [0121.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0121.857] GetFileType (hFile=0x248) returned 0x1 [0121.857] WriteFile (in: hFile=0x248, lpBuffer=0x26926e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x26926e0*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0121.859] CloseHandle (hObject=0x248) returned 1 [0121.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0121.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.860] GetFileType (hFile=0x248) returned 0x1 [0121.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0121.860] GetFileType (hFile=0x248) returned 0x1 [0121.860] WriteFile (in: hFile=0x248, lpBuffer=0x2699508*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2699508*, lpNumberOfBytesWritten=0x1ad818*=0xc6, lpOverlapped=0x0) returned 1 [0121.861] CloseHandle (hObject=0x248) returned 1 [0121.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0121.861] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0121.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0121.863] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0121.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0121.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0121.863] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0121.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0121.864] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0121.864] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0121.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0121.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0121.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0121.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0121.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0121.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0121.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0121.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0121.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0121.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0121.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0121.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0121.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0121.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0121.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0121.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0121.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0121.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0121.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0121.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0121.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0121.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0121.899] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0121.899] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0121.899] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0121.900] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0121.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0121.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0121.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0600 [0121.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0121.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0121.900] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0121.901] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0121.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0121.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0121.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0121.903] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.904] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.904] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.904] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.904] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.905] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.906] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0121.906] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0121.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0121.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0121.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0600 [0121.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.910] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0121.911] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0121.911] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0121.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0121.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0121.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0121.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0121.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0122.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x91 [0122.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0122.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0122.464] GetFileType (hFile=0x240) returned 0x1 [0122.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0122.464] GetFileType (hFile=0x240) returned 0x1 [0122.464] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.523] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.525] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.543] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.544] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.544] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.544] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.545] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.545] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.545] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.545] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.545] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.546] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.546] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.546] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.546] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.547] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.547] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.547] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.547] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.547] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.548] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.548] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.548] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.548] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.549] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.549] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.549] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.549] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.550] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.552] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.552] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.552] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.553] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.553] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.553] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.554] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.554] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.554] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.554] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.554] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.555] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.555] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.555] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.555] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.556] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.556] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.556] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.556] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.556] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.557] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.557] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.557] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.557] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.558] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.558] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.558] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.558] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.558] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.559] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.559] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.559] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.559] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.560] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.560] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.560] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.560] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.560] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.561] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.561] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.561] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.561] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.561] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.562] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.562] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.562] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.562] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.563] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.563] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.563] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.563] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.563] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.564] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.564] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.564] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.564] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.565] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.565] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.565] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.565] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.565] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.566] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.566] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.568] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.568] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.568] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.568] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.569] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.569] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.569] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.569] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.570] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.570] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.570] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.570] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.571] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.571] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.571] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.571] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.571] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.572] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.572] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.572] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.572] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.572] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.573] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.573] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.573] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.573] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.573] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.574] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.574] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.574] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.574] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.575] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.575] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.575] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.575] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.575] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.576] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.577] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.577] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.577] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.577] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.578] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.578] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.578] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.578] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.578] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.579] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.579] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.579] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.579] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.579] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.580] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.580] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.580] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.580] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.580] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.581] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.581] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.581] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.581] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.582] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.582] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.582] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.582] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.583] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.583] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.583] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.584] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.584] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.584] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.584] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.584] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.585] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.585] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.585] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.585] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.585] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.586] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.586] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.586] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.586] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.586] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.587] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.587] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.587] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.587] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.588] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.589] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.589] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.589] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.590] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.590] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.590] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.590] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.590] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.591] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.593] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.593] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.593] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.593] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.594] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.594] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.594] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.594] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.594] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.596] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.597] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.600] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.600] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.600] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.600] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.601] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.601] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.601] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.601] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.601] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.602] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.602] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.602] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.602] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.603] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.603] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.603] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.603] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.604] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.604] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.604] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.604] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.604] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.605] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.605] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.605] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.605] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.606] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.606] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.606] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.606] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.606] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.607] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.607] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.607] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.607] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.607] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.608] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.608] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.608] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.608] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.609] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.609] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.609] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.609] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.609] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.610] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.610] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.610] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.610] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.610] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.611] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.611] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.611] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.611] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.611] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.611] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.612] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.612] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.613] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.613] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.613] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.613] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.614] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.614] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.614] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.614] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.614] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.614] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.615] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.615] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.615] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.615] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.615] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.616] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.617] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.617] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.617] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.617] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.618] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0122.618] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0122.618] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0xbf, lpOverlapped=0x0) returned 1 [0122.618] ReadFile (in: hFile=0x240, lpBuffer=0x262a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x262a488*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0122.619] WriteFile (in: hFile=0x248, lpBuffer=0x2628988*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2628988*, lpNumberOfBytesWritten=0x1ad858*=0xe0, lpOverlapped=0x0) returned 1 [0122.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x91 [0122.620] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js")) returned 1 [0122.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.EnyBenied", lpFilePart=0x0) returned 0xa5 [0122.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0122.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0122.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0123.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x9b [0123.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0123.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0123.204] GetFileType (hFile=0x240) returned 0x1 [0123.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0123.204] GetFileType (hFile=0x240) returned 0x1 [0123.204] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.227] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.228] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.228] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.229] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.229] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.229] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.229] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.229] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.230] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.230] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.230] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.230] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.231] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.231] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.231] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.231] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.231] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.232] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.232] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad918*=0x1000, lpOverlapped=0x0) returned 1 [0123.232] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x89c, lpOverlapped=0x0) returned 1 [0123.232] ReadFile (in: hFile=0x240, lpBuffer=0x2600f1c, nNumberOfBytesToRead=0x364, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2600f1c*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0123.232] ReadFile (in: hFile=0x240, lpBuffer=0x2601298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2601298*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0123.232] CloseHandle (hObject=0x240) returned 1 [0123.232] WriteFile (in: hFile=0x248, lpBuffer=0x25ff858*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x25ff858*, lpNumberOfBytesWritten=0x1ad858*=0x8c0, lpOverlapped=0x0) returned 1 [0123.233] CloseHandle (hObject=0x248) returned 1 [0123.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x9b [0123.233] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js")) returned 1 [0123.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.EnyBenied", lpFilePart=0x0) returned 0xa4 [0123.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0123.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0123.236] GetFileType (hFile=0x248) returned 0x1 [0123.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0123.236] GetFileType (hFile=0x248) returned 0x1 [0123.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x9a [0123.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0123.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0123.736] GetFileType (hFile=0x240) returned 0x1 [0123.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0123.736] GetFileType (hFile=0x240) returned 0x1 [0123.736] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.746] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.746] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.747] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.747] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.747] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.748] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.748] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.748] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.749] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.749] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.749] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.749] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.750] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.750] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.750] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.751] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.751] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.751] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.752] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.752] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.752] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.753] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.753] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0123.753] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x1aa, lpOverlapped=0x0) returned 1 [0123.753] ReadFile (in: hFile=0x240, lpBuffer=0x2752590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2752590*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0123.753] CloseHandle (hObject=0x240) returned 1 [0123.754] CloseHandle (hObject=0x248) returned 1 [0123.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x9a [0123.754] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js")) returned 1 [0123.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.EnyBenied", lpFilePart=0x0) returned 0xa8 [0123.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0123.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0123.757] GetFileType (hFile=0x248) returned 0x1 [0123.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0123.757] GetFileType (hFile=0x248) returned 0x1 [0124.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x9e [0124.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0124.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0124.246] GetFileType (hFile=0x240) returned 0x1 [0124.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0124.246] GetFileType (hFile=0x240) returned 0x1 [0124.246] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.255] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.255] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.256] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.256] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.256] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.257] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.257] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.257] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.257] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.258] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.258] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.258] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.259] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.259] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.259] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.259] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.260] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x1e1, lpOverlapped=0x0) returned 1 [0124.260] ReadFile (in: hFile=0x240, lpBuffer=0x26b26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26b26d0*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0124.260] CloseHandle (hObject=0x240) returned 1 [0124.260] CloseHandle (hObject=0x248) returned 1 [0124.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x9e [0124.261] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html")) returned 1 [0124.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.EnyBenied", lpFilePart=0x0) returned 0xa6 [0124.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0124.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0124.264] GetFileType (hFile=0x248) returned 0x1 [0124.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0124.265] GetFileType (hFile=0x248) returned 0x1 [0124.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x9c [0124.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0124.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0124.912] GetFileType (hFile=0x240) returned 0x1 [0124.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0124.912] GetFileType (hFile=0x240) returned 0x1 [0124.912] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.920] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.933] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.933] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.933] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.934] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.934] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.934] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.934] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.934] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.935] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.935] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.935] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.935] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.936] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.936] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.936] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.936] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.937] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.937] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.937] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.937] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.938] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.938] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.938] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.938] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.939] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.939] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.939] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.939] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.940] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.940] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.940] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.958] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.959] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.959] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.959] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.960] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.960] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.960] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.960] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.961] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.961] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.961] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.962] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.962] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.962] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.962] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.963] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.963] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.963] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.964] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.964] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.964] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.964] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.965] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.965] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.965] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0124.966] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x258, lpOverlapped=0x0) returned 1 [0124.966] ReadFile (in: hFile=0x240, lpBuffer=0x260b548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0124.966] CloseHandle (hObject=0x240) returned 1 [0124.966] CloseHandle (hObject=0x248) returned 1 [0124.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x9c [0124.966] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js")) returned 1 [0124.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.EnyBenied", lpFilePart=0x0) returned 0x9f [0124.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0124.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0124.970] GetFileType (hFile=0x248) returned 0x1 [0124.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0124.970] GetFileType (hFile=0x248) returned 0x1 [0125.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0125.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0125.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0125.490] GetFileType (hFile=0x240) returned 0x1 [0125.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0125.490] GetFileType (hFile=0x240) returned 0x1 [0125.490] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.519] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.520] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.520] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.521] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.521] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.521] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.522] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.522] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.522] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.523] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.523] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0125.523] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0xe17, lpOverlapped=0x0) returned 1 [0125.523] ReadFile (in: hFile=0x240, lpBuffer=0x278e097, nNumberOfBytesToRead=0x1e9, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e097*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0125.523] ReadFile (in: hFile=0x240, lpBuffer=0x278e298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x278e298*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0125.523] CloseHandle (hObject=0x240) returned 1 [0125.524] CloseHandle (hObject=0x248) returned 1 [0125.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0125.524] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js")) returned 1 [0125.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.EnyBenied", lpFilePart=0x0) returned 0x9a [0125.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0125.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0125.527] GetFileType (hFile=0x248) returned 0x1 [0125.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0125.527] GetFileType (hFile=0x248) returned 0x1 [0126.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0126.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0126.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0126.078] GetFileType (hFile=0x240) returned 0x1 [0126.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0126.078] GetFileType (hFile=0x240) returned 0x1 [0126.078] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.114] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.115] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.116] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.117] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.118] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.119] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.120] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.121] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.122] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.123] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.123] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0126.123] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x878, lpOverlapped=0x0) returned 1 [0126.124] ReadFile (in: hFile=0x240, lpBuffer=0x26e2798, nNumberOfBytesToRead=0x388, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2798*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0126.124] ReadFile (in: hFile=0x240, lpBuffer=0x26e2b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26e2b38*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0126.124] CloseHandle (hObject=0x240) returned 1 [0126.124] CloseHandle (hObject=0x248) returned 1 [0126.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0126.124] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js")) returned 1 [0126.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.EnyBenied", lpFilePart=0x0) returned 0x9d [0126.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0126.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0126.128] GetFileType (hFile=0x248) returned 0x1 [0126.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0126.128] GetFileType (hFile=0x248) returned 0x1 [0126.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0126.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0126.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0126.657] GetFileType (hFile=0x240) returned 0x1 [0126.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0126.657] GetFileType (hFile=0x240) returned 0x1 [0126.657] ReadFile (in: hFile=0x240, lpBuffer=0x26369f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26369f0*, lpNumberOfBytesRead=0x1ad988*=0xc26, lpOverlapped=0x0) returned 1 [0126.677] ReadFile (in: hFile=0x240, lpBuffer=0x26365fe, nNumberOfBytesToRead=0x3da, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26365fe*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0126.677] ReadFile (in: hFile=0x240, lpBuffer=0x26369f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26369f0*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0126.677] CloseHandle (hObject=0x240) returned 1 [0126.678] WriteFile (in: hFile=0x248, lpBuffer=0x2634ee8*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2634ee8*, lpNumberOfBytesWritten=0x1ad858*=0xc50, lpOverlapped=0x0) returned 1 [0126.679] CloseHandle (hObject=0x248) returned 1 [0126.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0126.679] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css")) returned 1 [0126.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.EnyBenied", lpFilePart=0x0) returned 0x9e [0126.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0126.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0126.689] GetFileType (hFile=0x248) returned 0x1 [0126.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0126.689] GetFileType (hFile=0x248) returned 0x1 [0127.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0127.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0127.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0127.348] GetFileType (hFile=0x240) returned 0x1 [0127.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0127.348] GetFileType (hFile=0x240) returned 0x1 [0127.348] ReadFile (in: hFile=0x240, lpBuffer=0x277e600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x277e600*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0127.372] ReadFile (in: hFile=0x240, lpBuffer=0x277e600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x277e600*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0127.373] ReadFile (in: hFile=0x240, lpBuffer=0x277e600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x277e600*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0127.374] ReadFile (in: hFile=0x240, lpBuffer=0x277e600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x277e600*, lpNumberOfBytesRead=0x1ad988*=0x8a8, lpOverlapped=0x0) returned 1 [0127.374] ReadFile (in: hFile=0x240, lpBuffer=0x277e290, nNumberOfBytesToRead=0x358, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x277e290*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0127.374] ReadFile (in: hFile=0x240, lpBuffer=0x277e600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x277e600*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0127.374] CloseHandle (hObject=0x240) returned 1 [0127.374] CloseHandle (hObject=0x248) returned 1 [0127.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0127.375] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html")) returned 1 [0127.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.EnyBenied", lpFilePart=0x0) returned 0xa3 [0127.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0127.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0127.380] GetFileType (hFile=0x248) returned 0x1 [0127.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0127.380] GetFileType (hFile=0x248) returned 0x1 [0127.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0127.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0127.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0127.895] GetFileType (hFile=0x240) returned 0x1 [0127.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0127.895] GetFileType (hFile=0x240) returned 0x1 [0127.895] ReadFile (in: hFile=0x240, lpBuffer=0x26c7918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c7918*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0128.080] ReadFile (in: hFile=0x240, lpBuffer=0x26c7918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c7918*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0128.203] ReadFile (in: hFile=0x240, lpBuffer=0x26c7918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c7918*, lpNumberOfBytesRead=0x1ad988*=0xb20, lpOverlapped=0x0) returned 1 [0128.203] ReadFile (in: hFile=0x240, lpBuffer=0x26c7820, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c7820*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0128.203] ReadFile (in: hFile=0x240, lpBuffer=0x26c7918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26c7918*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0128.203] CloseHandle (hObject=0x240) returned 1 [0128.203] CloseHandle (hObject=0x248) returned 1 [0128.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0128.204] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js")) returned 1 [0128.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.EnyBenied", lpFilePart=0x0) returned 0xa5 [0128.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0128.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0128.207] GetFileType (hFile=0x248) returned 0x1 [0128.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0128.207] GetFileType (hFile=0x248) returned 0x1 [0128.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0128.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0128.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0128.805] GetFileType (hFile=0x240) returned 0x1 [0128.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0128.805] GetFileType (hFile=0x240) returned 0x1 [0128.805] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0128.812] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0128.813] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0128.814] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0128.875] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.092] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.135] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.135] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.135] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.136] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.136] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.136] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.137] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.137] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.137] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.138] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.138] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.138] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.138] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.139] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.139] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.139] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.140] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.140] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.140] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.141] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.141] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.141] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.141] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.142] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.142] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.142] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.143] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.143] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.143] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.144] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.144] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.144] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.144] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.145] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.145] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.145] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.146] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.146] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.146] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.147] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.147] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.147] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.147] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.148] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.149] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.150] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.151] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.152] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.153] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.153] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.154] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.155] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.158] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.158] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.159] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.160] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.161] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.162] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.163] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.185] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.185] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.186] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.186] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.186] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.187] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x39, lpOverlapped=0x0) returned 1 [0129.187] ReadFile (in: hFile=0x240, lpBuffer=0x260feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x260feb8*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0129.187] CloseHandle (hObject=0x240) returned 1 [0129.187] CloseHandle (hObject=0x248) returned 1 [0129.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0129.187] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css")) returned 1 [0129.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.EnyBenied", lpFilePart=0x0) returned 0xac [0129.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0129.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0129.192] GetFileType (hFile=0x248) returned 0x1 [0129.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0129.193] GetFileType (hFile=0x248) returned 0x1 [0129.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0129.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0129.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0129.635] GetFileType (hFile=0x240) returned 0x1 [0129.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0129.636] GetFileType (hFile=0x240) returned 0x1 [0129.636] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.666] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.763] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.764] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.764] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.764] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.765] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0129.765] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0xc33, lpOverlapped=0x0) returned 1 [0129.765] ReadFile (in: hFile=0x240, lpBuffer=0x279cf3b, nNumberOfBytesToRead=0x3cd, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279cf3b*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0129.765] ReadFile (in: hFile=0x240, lpBuffer=0x279d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x279d320*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0129.765] CloseHandle (hObject=0x240) returned 1 [0129.765] CloseHandle (hObject=0x248) returned 1 [0129.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0129.766] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js")) returned 1 [0129.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.EnyBenied", lpFilePart=0x0) returned 0xa4 [0129.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0129.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0129.769] GetFileType (hFile=0x248) returned 0x1 [0129.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0129.769] GetFileType (hFile=0x248) returned 0x1 [0130.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0130.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0130.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0130.175] GetFileType (hFile=0x240) returned 0x1 [0130.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0130.175] GetFileType (hFile=0x240) returned 0x1 [0130.175] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.184] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.185] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.185] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.186] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.186] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.186] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.187] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.187] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.187] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.187] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.188] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.188] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.188] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.189] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.189] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.189] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.190] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.190] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.190] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.191] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.191] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.191] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.191] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.192] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.192] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.192] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.193] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.193] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.193] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.194] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.194] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.194] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.195] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.195] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.195] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.195] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.196] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.196] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.196] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.197] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.197] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.198] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0xdeb, lpOverlapped=0x0) returned 1 [0130.198] ReadFile (in: hFile=0x240, lpBuffer=0x26cc543, nNumberOfBytesToRead=0x215, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc543*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0130.198] ReadFile (in: hFile=0x240, lpBuffer=0x26cc770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x26cc770*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0130.198] CloseHandle (hObject=0x240) returned 1 [0130.198] CloseHandle (hObject=0x248) returned 1 [0130.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0130.199] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js")) returned 1 [0130.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.EnyBenied", lpFilePart=0x0) returned 0xa6 [0130.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0130.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0130.203] GetFileType (hFile=0x248) returned 0x1 [0130.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0130.203] GetFileType (hFile=0x248) returned 0x1 [0130.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0130.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0130.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0130.737] GetFileType (hFile=0x240) returned 0x1 [0130.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0130.737] GetFileType (hFile=0x240) returned 0x1 [0130.737] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.744] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.745] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.746] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.747] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.748] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.749] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.750] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.750] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.751] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.752] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.753] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.837] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.965] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.965] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.965] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.966] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.966] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.966] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.966] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.967] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.967] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.967] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.967] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.968] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.968] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.968] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.968] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.968] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.969] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.969] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.969] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.969] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.970] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.970] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.970] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.970] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.971] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.971] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.971] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.972] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.972] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.972] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.972] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.972] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.973] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.973] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.973] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.973] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.975] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.976] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.977] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.977] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.978] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.979] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.979] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.980] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.981] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.982] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.982] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.983] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.984] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.984] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.985] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.986] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.987] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.988] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.989] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.990] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.990] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.994] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.995] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.996] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.997] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.998] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0130.999] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.000] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.083] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.083] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.084] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.085] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.085] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.085] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.085] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.086] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.086] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.086] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.086] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.086] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.087] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.087] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.087] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.087] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.088] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.088] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.088] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.088] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.089] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.089] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.089] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.089] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.089] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.090] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.090] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.090] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.090] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.091] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.091] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.091] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.091] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.092] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.092] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.092] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.092] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.093] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.093] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.093] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.093] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.094] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.094] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.094] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x1000, lpOverlapped=0x0) returned 1 [0131.094] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x4cf, lpOverlapped=0x0) returned 1 [0131.094] ReadFile (in: hFile=0x240, lpBuffer=0x263f88f, nNumberOfBytesToRead=0x331, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263f88f*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0131.094] ReadFile (in: hFile=0x240, lpBuffer=0x263fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x263fbd8*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0131.095] CloseHandle (hObject=0x240) returned 1 [0131.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0131.095] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js")) returned 1 [0131.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.EnyBenied", lpFilePart=0x0) returned 0xa4 [0131.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0131.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0131.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0131.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x1ad370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0131.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad850) returned 1 [0131.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0131.585] GetFileType (hFile=0x240) returned 0x1 [0131.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0131.585] GetFileType (hFile=0x240) returned 0x1 [0131.586] ReadFile (in: hFile=0x240, lpBuffer=0x2603430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2603430*, lpNumberOfBytesRead=0x1ad988*=0x941, lpOverlapped=0x0) returned 1 [0131.659] ReadFile (in: hFile=0x240, lpBuffer=0x2603159, nNumberOfBytesToRead=0x2bf, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2603159*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0131.660] ReadFile (in: hFile=0x240, lpBuffer=0x2603430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad988, lpOverlapped=0x0 | out: lpBuffer=0x2603430*, lpNumberOfBytesRead=0x1ad988*=0x0, lpOverlapped=0x0) returned 1 [0131.660] CloseHandle (hObject=0x240) returned 1 [0131.660] WriteFile (in: hFile=0x248, lpBuffer=0x2601910*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x1ad858, lpOverlapped=0x0 | out: lpBuffer=0x2601910*, lpNumberOfBytesWritten=0x1ad858*=0x970, lpOverlapped=0x0) returned 1 [0131.661] CloseHandle (hObject=0x248) returned 1 [0131.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x1ad480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0131.661] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js")) returned 1 [0131.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0131.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0131.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", lpFilePart=0x0) returned 0x92 [0131.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0131.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0131.666] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0131.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0131.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0131.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0131.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0131.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", lpFilePart=0x0) returned 0x92 [0131.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0131.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.668] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0131.669] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0131.670] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0131.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0131.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0131.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.EnyBenied", lpFilePart=0x0) returned 0xa8 [0131.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0131.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0131.673] GetFileType (hFile=0x248) returned 0x1 [0131.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0131.673] GetFileType (hFile=0x248) returned 0x1 [0132.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0132.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0132.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0132.218] GetFileType (hFile=0x240) returned 0x1 [0132.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0132.218] GetFileType (hFile=0x240) returned 0x1 [0132.218] ReadFile (in: hFile=0x240, lpBuffer=0x2752d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2752d18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.309] ReadFile (in: hFile=0x240, lpBuffer=0x2752d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2752d18*, lpNumberOfBytesRead=0x1ad908*=0xa1d, lpOverlapped=0x0) returned 1 [0132.309] ReadFile (in: hFile=0x240, lpBuffer=0x2752b1d, nNumberOfBytesToRead=0x1e3, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2752b1d*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0132.309] ReadFile (in: hFile=0x240, lpBuffer=0x2752d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2752d18*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0132.309] CloseHandle (hObject=0x240) returned 1 [0132.310] CloseHandle (hObject=0x248) returned 1 [0132.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0132.310] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css")) returned 1 [0132.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.EnyBenied", lpFilePart=0x0) returned 0xa7 [0132.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0132.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0132.312] GetFileType (hFile=0x248) returned 0x1 [0132.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0132.313] GetFileType (hFile=0x248) returned 0x1 [0132.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0132.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0132.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0132.757] GetFileType (hFile=0x240) returned 0x1 [0132.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0132.757] GetFileType (hFile=0x240) returned 0x1 [0132.757] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.773] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.774] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.775] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.776] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.776] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.777] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.778] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0132.880] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.706] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.707] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.707] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.708] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.708] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.708] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.710] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.710] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.711] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.711] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.711] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.712] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.712] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.712] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.713] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.713] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.713] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.714] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.714] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.714] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.714] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.715] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.715] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.715] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.716] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0133.716] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x1da, lpOverlapped=0x0) returned 1 [0133.716] ReadFile (in: hFile=0x240, lpBuffer=0x269be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x269be18*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0133.716] CloseHandle (hObject=0x240) returned 1 [0133.716] CloseHandle (hObject=0x248) returned 1 [0133.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0133.717] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js")) returned 1 [0133.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.EnyBenied", lpFilePart=0x0) returned 0xb0 [0133.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0133.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0133.720] GetFileType (hFile=0x248) returned 0x1 [0133.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0133.720] GetFileType (hFile=0x248) returned 0x1 [0134.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0134.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0134.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0134.322] GetFileType (hFile=0x240) returned 0x1 [0134.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0134.322] GetFileType (hFile=0x240) returned 0x1 [0134.322] ReadFile (in: hFile=0x240, lpBuffer=0x2606340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2606340*, lpNumberOfBytesRead=0x1ad908*=0xf2, lpOverlapped=0x0) returned 1 [0134.323] ReadFile (in: hFile=0x240, lpBuffer=0x2606340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2606340*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0134.323] CloseHandle (hObject=0x240) returned 1 [0134.323] WriteFile (in: hFile=0x248, lpBuffer=0x2604800*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x2604800*, lpNumberOfBytesWritten=0x1ad7d8*=0x120, lpOverlapped=0x0) returned 1 [0134.324] CloseHandle (hObject=0x248) returned 1 [0134.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0134.324] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js")) returned 1 [0134.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.EnyBenied", lpFilePart=0x0) returned 0xb4 [0134.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0134.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0134.326] GetFileType (hFile=0x248) returned 0x1 [0134.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0134.326] GetFileType (hFile=0x248) returned 0x1 [0134.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0134.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0134.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0134.839] GetFileType (hFile=0x240) returned 0x1 [0134.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0134.839] GetFileType (hFile=0x240) returned 0x1 [0134.839] ReadFile (in: hFile=0x240, lpBuffer=0x274daa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x274daa0*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0134.938] ReadFile (in: hFile=0x240, lpBuffer=0x274daa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x274daa0*, lpNumberOfBytesRead=0x1ad908*=0xbef, lpOverlapped=0x0) returned 1 [0134.938] ReadFile (in: hFile=0x240, lpBuffer=0x274da77, nNumberOfBytesToRead=0x11, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x274da77*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0134.938] ReadFile (in: hFile=0x240, lpBuffer=0x274daa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x274daa0*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0134.938] CloseHandle (hObject=0x240) returned 1 [0134.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0134.938] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png")) returned 1 [0134.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.EnyBenied", lpFilePart=0x0) returned 0xa8 [0134.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0134.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0134.941] GetFileType (hFile=0x248) returned 0x1 [0134.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0134.941] GetFileType (hFile=0x248) returned 0x1 [0135.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0135.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0135.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0135.417] GetFileType (hFile=0x240) returned 0x1 [0135.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0135.417] GetFileType (hFile=0x240) returned 0x1 [0135.417] ReadFile (in: hFile=0x240, lpBuffer=0x2696db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2696db0*, lpNumberOfBytesRead=0x1ad908*=0x3b, lpOverlapped=0x0) returned 1 [0135.418] ReadFile (in: hFile=0x240, lpBuffer=0x2696db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2696db0*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0135.418] CloseHandle (hObject=0x240) returned 1 [0135.418] WriteFile (in: hFile=0x248, lpBuffer=0x2695290*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x2695290*, lpNumberOfBytesWritten=0x1ad7d8*=0x60, lpOverlapped=0x0) returned 1 [0135.419] CloseHandle (hObject=0x248) returned 1 [0135.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0135.419] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html")) returned 1 [0135.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.EnyBenied", lpFilePart=0x0) returned 0xa6 [0135.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0135.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0135.422] GetFileType (hFile=0x248) returned 0x1 [0135.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0135.422] GetFileType (hFile=0x248) returned 0x1 [0135.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0135.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0135.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0135.775] GetFileType (hFile=0x240) returned 0x1 [0135.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0135.775] GetFileType (hFile=0x240) returned 0x1 [0135.775] ReadFile (in: hFile=0x240, lpBuffer=0x27de378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27de378*, lpNumberOfBytesRead=0x1ad908*=0x828, lpOverlapped=0x0) returned 1 [0135.922] ReadFile (in: hFile=0x240, lpBuffer=0x27ddf88, nNumberOfBytesToRead=0x3d8, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27ddf88*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0135.922] ReadFile (in: hFile=0x240, lpBuffer=0x27de378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27de378*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0135.922] CloseHandle (hObject=0x240) returned 1 [0135.922] WriteFile (in: hFile=0x248, lpBuffer=0x27dc860*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x27dc860*, lpNumberOfBytesWritten=0x1ad7d8*=0x850, lpOverlapped=0x0) returned 1 [0135.923] CloseHandle (hObject=0x248) returned 1 [0135.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0135.923] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html")) returned 1 [0135.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.EnyBenied", lpFilePart=0x0) returned 0xa7 [0135.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0135.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0135.926] GetFileType (hFile=0x248) returned 0x1 [0135.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0135.926] GetFileType (hFile=0x248) returned 0x1 [0136.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0136.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0136.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0136.280] GetFileType (hFile=0x240) returned 0x1 [0136.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0136.281] GetFileType (hFile=0x240) returned 0x1 [0136.281] ReadFile (in: hFile=0x240, lpBuffer=0x2726230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2726230*, lpNumberOfBytesRead=0x1ad908*=0x3b, lpOverlapped=0x0) returned 1 [0136.282] ReadFile (in: hFile=0x240, lpBuffer=0x2726230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2726230*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0136.282] CloseHandle (hObject=0x240) returned 1 [0136.282] WriteFile (in: hFile=0x248, lpBuffer=0x2724718*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x2724718*, lpNumberOfBytesWritten=0x1ad7d8*=0x60, lpOverlapped=0x0) returned 1 [0136.283] CloseHandle (hObject=0x248) returned 1 [0136.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0136.283] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html")) returned 1 [0136.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.EnyBenied", lpFilePart=0x0) returned 0xa6 [0136.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0136.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0136.285] GetFileType (hFile=0x248) returned 0x1 [0136.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0136.285] GetFileType (hFile=0x248) returned 0x1 [0136.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0136.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0136.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0136.641] GetFileType (hFile=0x240) returned 0x1 [0136.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0136.641] GetFileType (hFile=0x240) returned 0x1 [0136.642] ReadFile (in: hFile=0x240, lpBuffer=0x266d8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x266d8a8*, lpNumberOfBytesRead=0x1ad908*=0x3b, lpOverlapped=0x0) returned 1 [0136.643] ReadFile (in: hFile=0x240, lpBuffer=0x266d8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x266d8a8*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0136.643] CloseHandle (hObject=0x240) returned 1 [0136.643] WriteFile (in: hFile=0x248, lpBuffer=0x266bd90*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x266bd90*, lpNumberOfBytesWritten=0x1ad7d8*=0x60, lpOverlapped=0x0) returned 1 [0136.644] CloseHandle (hObject=0x248) returned 1 [0136.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0136.644] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html")) returned 1 [0136.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9d [0136.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0136.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0136.649] GetFileType (hFile=0x248) returned 0x1 [0136.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0136.650] GetFileType (hFile=0x248) returned 0x1 [0136.650] WriteFile (in: hFile=0x248, lpBuffer=0x2678040*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2678040*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0136.651] CloseHandle (hObject=0x248) returned 1 [0136.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\ENYBENY.png", lpFilePart=0x0) returned 0x9d [0136.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0136.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0136.652] GetFileType (hFile=0x248) returned 0x1 [0136.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0136.652] GetFileType (hFile=0x248) returned 0x1 [0136.652] WriteFile (in: hFile=0x248, lpBuffer=0x26791b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x26791b0*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0136.654] CloseHandle (hObject=0x248) returned 1 [0136.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc8 [0136.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0136.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0136.655] GetFileType (hFile=0x248) returned 0x1 [0136.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0136.655] GetFileType (hFile=0x248) returned 0x1 [0136.655] WriteFile (in: hFile=0x248, lpBuffer=0x2680020*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2680020*, lpNumberOfBytesWritten=0x1ad818*=0xc6, lpOverlapped=0x0) returned 1 [0136.656] CloseHandle (hObject=0x248) returned 1 [0136.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0136.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0136.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", lpFilePart=0x0) returned 0x9b [0136.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0136.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0136.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0136.657] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0136.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0136.658] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0136.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0136.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0136.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0136.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0136.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", lpFilePart=0x0) returned 0x9b [0136.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0136.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0136.658] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0136.659] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0136.659] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0136.659] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0136.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0136.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0136.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.EnyBenied", lpFilePart=0x0) returned 0xae [0136.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0136.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0136.661] GetFileType (hFile=0x248) returned 0x1 [0136.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0136.661] GetFileType (hFile=0x248) returned 0x1 [0137.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0137.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0137.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0137.157] GetFileType (hFile=0x240) returned 0x1 [0137.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0137.157] GetFileType (hFile=0x240) returned 0x1 [0137.157] ReadFile (in: hFile=0x240, lpBuffer=0x27cbdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27cbdd8*, lpNumberOfBytesRead=0x1ad908*=0x1000, lpOverlapped=0x0) returned 1 [0137.239] ReadFile (in: hFile=0x240, lpBuffer=0x27cbdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27cbdd8*, lpNumberOfBytesRead=0x1ad908*=0x74c, lpOverlapped=0x0) returned 1 [0137.276] ReadFile (in: hFile=0x240, lpBuffer=0x27cbd0c, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27cbd0c*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0137.277] ReadFile (in: hFile=0x240, lpBuffer=0x27cbdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x27cbdd8*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0137.277] CloseHandle (hObject=0x240) returned 1 [0137.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0137.277] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html")) returned 1 [0137.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.EnyBenied", lpFilePart=0x0) returned 0xac [0137.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0137.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0137.280] GetFileType (hFile=0x248) returned 0x1 [0137.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0137.280] GetFileType (hFile=0x248) returned 0x1 [0137.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x1ad2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0137.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7d0) returned 1 [0137.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x240 [0137.650] GetFileType (hFile=0x240) returned 0x1 [0137.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad740) returned 1 [0137.650] GetFileType (hFile=0x240) returned 0x1 [0137.650] ReadFile (in: hFile=0x240, lpBuffer=0x2714c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2714c10*, lpNumberOfBytesRead=0x1ad908*=0x945, lpOverlapped=0x0) returned 1 [0137.826] ReadFile (in: hFile=0x240, lpBuffer=0x271493d, nNumberOfBytesToRead=0x2bb, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x271493d*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0137.826] ReadFile (in: hFile=0x240, lpBuffer=0x2714c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ad908, lpOverlapped=0x0 | out: lpBuffer=0x2714c10*, lpNumberOfBytesRead=0x1ad908*=0x0, lpOverlapped=0x0) returned 1 [0137.826] CloseHandle (hObject=0x240) returned 1 [0137.827] WriteFile (in: hFile=0x248, lpBuffer=0x27130f8*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x1ad7d8, lpOverlapped=0x0 | out: lpBuffer=0x27130f8*, lpNumberOfBytesWritten=0x1ad7d8*=0x970, lpOverlapped=0x0) returned 1 [0137.828] CloseHandle (hObject=0x248) returned 1 [0137.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x1ad400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0137.828] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js")) returned 1 [0137.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\ENYBENY.TXT", lpFilePart=0x0) returned 0xa6 [0137.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0137.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0137.833] GetFileType (hFile=0x248) returned 0x1 [0137.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0137.833] GetFileType (hFile=0x248) returned 0x1 [0137.834] WriteFile (in: hFile=0x248, lpBuffer=0x271fd18*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x271fd18*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0137.835] CloseHandle (hObject=0x248) returned 1 [0137.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\ENYBENY.png", lpFilePart=0x0) returned 0xa6 [0137.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0137.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0137.836] GetFileType (hFile=0x248) returned 0x1 [0137.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0137.836] GetFileType (hFile=0x248) returned 0x1 [0137.836] WriteFile (in: hFile=0x248, lpBuffer=0x2720e98*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x2720e98*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0137.838] CloseHandle (hObject=0x248) returned 1 [0137.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xd1 [0137.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0137.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0137.839] GetFileType (hFile=0x248) returned 0x1 [0137.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0137.839] GetFileType (hFile=0x248) returned 0x1 [0137.839] WriteFile (in: hFile=0x248, lpBuffer=0x2727d38*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x2727d38*, lpNumberOfBytesWritten=0x1ad818*=0xc6, lpOverlapped=0x0) returned 1 [0137.840] CloseHandle (hObject=0x248) returned 1 [0137.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0137.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0137.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", lpFilePart=0x0) returned 0x90 [0137.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0137.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.846] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.847] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.847] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.847] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.847] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.847] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.847] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.848] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.849] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.850] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.851] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.851] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.851] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.851] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.851] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.851] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.852] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.853] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.854] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.854] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.854] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.854] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.854] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0137.854] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0137.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0137.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0137.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0137.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", lpFilePart=0x0) returned 0x90 [0137.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0600 [0137.857] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.857] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.857] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.857] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.857] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.857] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.857] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.858] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.858] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.858] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.858] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.858] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.858] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.858] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.859] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.860] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.861] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.864] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0137.864] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0137.864] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0137.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0137.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0137.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0137.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", lpFilePart=0x0) returned 0x93 [0137.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0137.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.866] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0137.867] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0137.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0137.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0137.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0137.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", lpFilePart=0x0) returned 0x93 [0137.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0137.867] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.867] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.868] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0137.868] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0137.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0137.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0137.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0137.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0137.869] GetFileType (hFile=0x248) returned 0x1 [0137.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0137.869] GetFileType (hFile=0x248) returned 0x1 [0137.869] WriteFile (in: hFile=0x248, lpBuffer=0x274c2d8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x274c2d8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0137.871] CloseHandle (hObject=0x248) returned 1 [0137.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0137.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0137.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0137.871] GetFileType (hFile=0x248) returned 0x1 [0137.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0137.872] GetFileType (hFile=0x248) returned 0x1 [0137.872] WriteFile (in: hFile=0x248, lpBuffer=0x274d448*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x274d448*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0137.874] CloseHandle (hObject=0x248) returned 1 [0137.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0137.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0137.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0137.878] GetFileType (hFile=0x248) returned 0x1 [0137.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0137.878] GetFileType (hFile=0x248) returned 0x1 [0137.878] WriteFile (in: hFile=0x248, lpBuffer=0x27542b8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x27542b8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0137.879] CloseHandle (hObject=0x248) returned 1 [0137.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0137.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0137.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x93 [0137.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0137.880] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.881] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.881] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0137.881] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0137.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0137.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0137.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0137.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x93 [0137.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0137.882] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.882] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.882] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0137.882] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0137.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0137.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0137.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0137.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0137.883] GetFileType (hFile=0x248) returned 0x1 [0137.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0137.883] GetFileType (hFile=0x248) returned 0x1 [0137.884] WriteFile (in: hFile=0x248, lpBuffer=0x2762078*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2762078*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0137.885] CloseHandle (hObject=0x248) returned 1 [0137.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0137.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0137.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0137.886] GetFileType (hFile=0x248) returned 0x1 [0137.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0137.886] GetFileType (hFile=0x248) returned 0x1 [0137.887] WriteFile (in: hFile=0x248, lpBuffer=0x27631e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27631e8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0137.888] CloseHandle (hObject=0x248) returned 1 [0137.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0137.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0137.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0137.985] GetFileType (hFile=0x248) returned 0x1 [0137.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0137.986] GetFileType (hFile=0x248) returned 0x1 [0137.986] WriteFile (in: hFile=0x248, lpBuffer=0x276a058*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x276a058*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0137.987] CloseHandle (hObject=0x248) returned 1 [0137.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0137.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0137.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x93 [0137.987] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0137.988] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.988] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.988] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0137.988] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0137.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0137.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0137.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0137.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x93 [0137.988] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0137.988] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.988] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.989] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0137.989] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0137.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0137.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0137.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0137.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0137.990] GetFileType (hFile=0x248) returned 0x1 [0137.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0137.990] GetFileType (hFile=0x248) returned 0x1 [0137.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0137.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0137.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0137.992] GetFileType (hFile=0x248) returned 0x1 [0137.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0137.992] GetFileType (hFile=0x248) returned 0x1 [0137.992] WriteFile (in: hFile=0x248, lpBuffer=0x2778f88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2778f88*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0137.994] CloseHandle (hObject=0x248) returned 1 [0137.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0137.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0137.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0137.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0137.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0137.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0137.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x93 [0137.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0137.998] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.998] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.999] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0137.999] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0137.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0137.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0137.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0137.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x93 [0137.999] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0137.999] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.999] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0137.999] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0137.999] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0137.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0137.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0138.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0138.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0138.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0138.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0138.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0138.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0138.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x93 [0138.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.153] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.153] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.154] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.154] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0138.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x93 [0138.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.154] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.154] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.154] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.154] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0138.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0138.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0138.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0138.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0138.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0138.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0138.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x93 [0138.160] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.161] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.161] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0138.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x93 [0138.162] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.162] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.162] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0138.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0138.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0138.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0138.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0138.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0138.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0138.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", lpFilePart=0x0) returned 0x93 [0138.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.294] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0138.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", lpFilePart=0x0) returned 0x93 [0138.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.294] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0138.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0138.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0138.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0138.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0138.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0138.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0138.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", lpFilePart=0x0) returned 0x93 [0138.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.301] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.301] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0138.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", lpFilePart=0x0) returned 0x93 [0138.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.302] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.302] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0138.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0138.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0138.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0138.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0138.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0138.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0138.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", lpFilePart=0x0) returned 0x93 [0138.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.308] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.308] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.308] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.308] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0138.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", lpFilePart=0x0) returned 0x93 [0138.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.308] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.309] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.309] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.309] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0138.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0138.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0138.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0138.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0138.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0138.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0138.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", lpFilePart=0x0) returned 0x93 [0138.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.363] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.364] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.364] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.364] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0138.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0138.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", lpFilePart=0x0) returned 0x93 [0138.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0138.364] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0138.365] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0138.365] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0138.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0138.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0138.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0138.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0138.369] GetFileType (hFile=0x248) returned 0x1 [0138.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0138.369] GetFileType (hFile=0x248) returned 0x1 [0138.369] WriteFile (in: hFile=0x248, lpBuffer=0x2616a70*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2616a70*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0138.370] CloseHandle (hObject=0x248) returned 1 [0138.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0138.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0138.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0138.371] GetFileType (hFile=0x248) returned 0x1 [0138.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0138.371] GetFileType (hFile=0x248) returned 0x1 [0138.371] WriteFile (in: hFile=0x248, lpBuffer=0x2617be0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2617be0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0138.372] CloseHandle (hObject=0x248) returned 1 [0138.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0138.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0138.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.040] GetFileType (hFile=0x248) returned 0x1 [0139.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.040] GetFileType (hFile=0x248) returned 0x1 [0139.040] WriteFile (in: hFile=0x248, lpBuffer=0x261ea50*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261ea50*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.041] CloseHandle (hObject=0x248) returned 1 [0139.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0139.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", lpFilePart=0x0) returned 0x93 [0139.041] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.041] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.041] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.041] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.042] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0139.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", lpFilePart=0x0) returned 0x93 [0139.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.042] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.042] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.042] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.042] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.045] GetFileType (hFile=0x248) returned 0x1 [0139.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.045] GetFileType (hFile=0x248) returned 0x1 [0139.046] WriteFile (in: hFile=0x248, lpBuffer=0x262c810*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x262c810*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.047] CloseHandle (hObject=0x248) returned 1 [0139.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.048] GetFileType (hFile=0x248) returned 0x1 [0139.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.048] GetFileType (hFile=0x248) returned 0x1 [0139.048] WriteFile (in: hFile=0x248, lpBuffer=0x262d980*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x262d980*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.049] CloseHandle (hObject=0x248) returned 1 [0139.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.052] GetFileType (hFile=0x248) returned 0x1 [0139.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.052] GetFileType (hFile=0x248) returned 0x1 [0139.052] WriteFile (in: hFile=0x248, lpBuffer=0x26347f0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26347f0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.053] CloseHandle (hObject=0x248) returned 1 [0139.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0139.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", lpFilePart=0x0) returned 0x93 [0139.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.054] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.054] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.054] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.054] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0139.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", lpFilePart=0x0) returned 0x93 [0139.054] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.055] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.055] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.055] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.055] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.056] GetFileType (hFile=0x248) returned 0x1 [0139.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.056] GetFileType (hFile=0x248) returned 0x1 [0139.057] WriteFile (in: hFile=0x248, lpBuffer=0x26425b0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26425b0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.058] CloseHandle (hObject=0x248) returned 1 [0139.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.059] GetFileType (hFile=0x248) returned 0x1 [0139.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.059] GetFileType (hFile=0x248) returned 0x1 [0139.059] WriteFile (in: hFile=0x248, lpBuffer=0x2643720*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2643720*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.060] CloseHandle (hObject=0x248) returned 1 [0139.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.077] GetFileType (hFile=0x248) returned 0x1 [0139.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.077] GetFileType (hFile=0x248) returned 0x1 [0139.077] WriteFile (in: hFile=0x248, lpBuffer=0x264a590*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x264a590*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.078] CloseHandle (hObject=0x248) returned 1 [0139.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0139.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x93 [0139.078] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.079] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.079] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0139.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x93 [0139.080] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.080] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.080] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.081] GetFileType (hFile=0x248) returned 0x1 [0139.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.081] GetFileType (hFile=0x248) returned 0x1 [0139.082] WriteFile (in: hFile=0x248, lpBuffer=0x2658350*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2658350*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.082] CloseHandle (hObject=0x248) returned 1 [0139.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.083] GetFileType (hFile=0x248) returned 0x1 [0139.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.083] GetFileType (hFile=0x248) returned 0x1 [0139.083] WriteFile (in: hFile=0x248, lpBuffer=0x26594c0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26594c0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.085] CloseHandle (hObject=0x248) returned 1 [0139.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.131] GetFileType (hFile=0x248) returned 0x1 [0139.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.131] GetFileType (hFile=0x248) returned 0x1 [0139.131] WriteFile (in: hFile=0x248, lpBuffer=0x2660330*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2660330*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.132] CloseHandle (hObject=0x248) returned 1 [0139.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0139.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x93 [0139.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.133] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.133] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.133] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.133] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0139.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x93 [0139.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.134] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.134] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.135] GetFileType (hFile=0x248) returned 0x1 [0139.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.136] GetFileType (hFile=0x248) returned 0x1 [0139.136] WriteFile (in: hFile=0x248, lpBuffer=0x266e0f0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x266e0f0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.137] CloseHandle (hObject=0x248) returned 1 [0139.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.138] GetFileType (hFile=0x248) returned 0x1 [0139.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.138] GetFileType (hFile=0x248) returned 0x1 [0139.138] WriteFile (in: hFile=0x248, lpBuffer=0x266f260*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x266f260*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.140] CloseHandle (hObject=0x248) returned 1 [0139.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.165] GetFileType (hFile=0x248) returned 0x1 [0139.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.165] GetFileType (hFile=0x248) returned 0x1 [0139.165] WriteFile (in: hFile=0x248, lpBuffer=0x26760d0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26760d0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.166] CloseHandle (hObject=0x248) returned 1 [0139.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0139.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x94 [0139.167] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.167] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.167] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0139.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x94 [0139.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.168] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.168] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9f [0139.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.170] GetFileType (hFile=0x248) returned 0x1 [0139.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.170] GetFileType (hFile=0x248) returned 0x1 [0139.170] WriteFile (in: hFile=0x248, lpBuffer=0x2683eb0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2683eb0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.171] CloseHandle (hObject=0x248) returned 1 [0139.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\ENYBENY.png", lpFilePart=0x0) returned 0x9f [0139.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.173] GetFileType (hFile=0x248) returned 0x1 [0139.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.173] GetFileType (hFile=0x248) returned 0x1 [0139.173] WriteFile (in: hFile=0x248, lpBuffer=0x2685020*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2685020*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.174] CloseHandle (hObject=0x248) returned 1 [0139.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xca [0139.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.408] GetFileType (hFile=0x248) returned 0x1 [0139.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.408] GetFileType (hFile=0x248) returned 0x1 [0139.408] WriteFile (in: hFile=0x248, lpBuffer=0x268be90*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x268be90*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.409] CloseHandle (hObject=0x248) returned 1 [0139.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0139.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x93 [0139.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.410] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.410] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0139.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x93 [0139.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.411] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.411] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.411] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.411] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.412] GetFileType (hFile=0x248) returned 0x1 [0139.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.412] GetFileType (hFile=0x248) returned 0x1 [0139.413] WriteFile (in: hFile=0x248, lpBuffer=0x2699c50*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2699c50*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.413] CloseHandle (hObject=0x248) returned 1 [0139.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.414] GetFileType (hFile=0x248) returned 0x1 [0139.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.414] GetFileType (hFile=0x248) returned 0x1 [0139.414] WriteFile (in: hFile=0x248, lpBuffer=0x269adc0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x269adc0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.416] CloseHandle (hObject=0x248) returned 1 [0139.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.429] GetFileType (hFile=0x248) returned 0x1 [0139.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.429] GetFileType (hFile=0x248) returned 0x1 [0139.429] WriteFile (in: hFile=0x248, lpBuffer=0x26a1c30*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26a1c30*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.430] CloseHandle (hObject=0x248) returned 1 [0139.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0139.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x93 [0139.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.431] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.431] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0139.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x93 [0139.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.432] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.432] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.432] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.432] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.433] GetFileType (hFile=0x248) returned 0x1 [0139.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.433] GetFileType (hFile=0x248) returned 0x1 [0139.433] WriteFile (in: hFile=0x248, lpBuffer=0x26af9f0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26af9f0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.434] CloseHandle (hObject=0x248) returned 1 [0139.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.435] GetFileType (hFile=0x248) returned 0x1 [0139.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.435] GetFileType (hFile=0x248) returned 0x1 [0139.435] WriteFile (in: hFile=0x248, lpBuffer=0x26b0b60*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26b0b60*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.437] CloseHandle (hObject=0x248) returned 1 [0139.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.439] GetFileType (hFile=0x248) returned 0x1 [0139.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.439] GetFileType (hFile=0x248) returned 0x1 [0139.439] WriteFile (in: hFile=0x248, lpBuffer=0x26b79d0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26b79d0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.440] CloseHandle (hObject=0x248) returned 1 [0139.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0139.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x93 [0139.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.441] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.441] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0139.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x93 [0139.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.442] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.442] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.442] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.443] GetFileType (hFile=0x248) returned 0x1 [0139.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.443] GetFileType (hFile=0x248) returned 0x1 [0139.443] WriteFile (in: hFile=0x248, lpBuffer=0x26c5790*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26c5790*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.444] CloseHandle (hObject=0x248) returned 1 [0139.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.446] GetFileType (hFile=0x248) returned 0x1 [0139.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.446] GetFileType (hFile=0x248) returned 0x1 [0139.446] WriteFile (in: hFile=0x248, lpBuffer=0x26c6900*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26c6900*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.447] CloseHandle (hObject=0x248) returned 1 [0139.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.487] GetFileType (hFile=0x248) returned 0x1 [0139.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.487] GetFileType (hFile=0x248) returned 0x1 [0139.487] WriteFile (in: hFile=0x248, lpBuffer=0x26cd770*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26cd770*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.488] CloseHandle (hObject=0x248) returned 1 [0139.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0139.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x93 [0139.489] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.489] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.490] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0139.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x93 [0139.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.490] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.491] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.492] GetFileType (hFile=0x248) returned 0x1 [0139.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.492] GetFileType (hFile=0x248) returned 0x1 [0139.492] WriteFile (in: hFile=0x248, lpBuffer=0x26db530*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26db530*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.494] CloseHandle (hObject=0x248) returned 1 [0139.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.495] GetFileType (hFile=0x248) returned 0x1 [0139.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.495] GetFileType (hFile=0x248) returned 0x1 [0139.495] WriteFile (in: hFile=0x248, lpBuffer=0x26dc6a0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26dc6a0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.497] CloseHandle (hObject=0x248) returned 1 [0139.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.537] GetFileType (hFile=0x248) returned 0x1 [0139.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.537] GetFileType (hFile=0x248) returned 0x1 [0139.537] WriteFile (in: hFile=0x248, lpBuffer=0x26e3510*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26e3510*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.538] CloseHandle (hObject=0x248) returned 1 [0139.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0139.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x93 [0139.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.540] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.540] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.540] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.540] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0139.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x93 [0139.540] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.540] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.541] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.541] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.541] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.542] GetFileType (hFile=0x248) returned 0x1 [0139.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.542] GetFileType (hFile=0x248) returned 0x1 [0139.542] WriteFile (in: hFile=0x248, lpBuffer=0x26f12d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26f12d0*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.543] CloseHandle (hObject=0x248) returned 1 [0139.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.544] GetFileType (hFile=0x248) returned 0x1 [0139.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.544] GetFileType (hFile=0x248) returned 0x1 [0139.544] WriteFile (in: hFile=0x248, lpBuffer=0x26f2440*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x26f2440*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.545] CloseHandle (hObject=0x248) returned 1 [0139.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.547] GetFileType (hFile=0x248) returned 0x1 [0139.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.547] GetFileType (hFile=0x248) returned 0x1 [0139.547] WriteFile (in: hFile=0x248, lpBuffer=0x26f92b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26f92b0*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.548] CloseHandle (hObject=0x248) returned 1 [0139.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0139.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", lpFilePart=0x0) returned 0x93 [0139.548] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.549] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.549] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.549] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.549] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0139.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", lpFilePart=0x0) returned 0x93 [0139.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.549] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.550] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.550] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.550] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.551] GetFileType (hFile=0x248) returned 0x1 [0139.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.551] GetFileType (hFile=0x248) returned 0x1 [0139.551] WriteFile (in: hFile=0x248, lpBuffer=0x2707070*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2707070*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.552] CloseHandle (hObject=0x248) returned 1 [0139.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.553] GetFileType (hFile=0x248) returned 0x1 [0139.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.553] GetFileType (hFile=0x248) returned 0x1 [0139.553] WriteFile (in: hFile=0x248, lpBuffer=0x27081e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x27081e0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.554] CloseHandle (hObject=0x248) returned 1 [0139.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.565] GetFileType (hFile=0x248) returned 0x1 [0139.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.565] GetFileType (hFile=0x248) returned 0x1 [0139.565] WriteFile (in: hFile=0x248, lpBuffer=0x270f050*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x270f050*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0139.566] CloseHandle (hObject=0x248) returned 1 [0139.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0139.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", lpFilePart=0x0) returned 0x93 [0139.567] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.568] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0139.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", lpFilePart=0x0) returned 0x93 [0139.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.568] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.569] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.569] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.570] GetFileType (hFile=0x248) returned 0x1 [0139.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.570] GetFileType (hFile=0x248) returned 0x1 [0139.570] WriteFile (in: hFile=0x248, lpBuffer=0x271ce10*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x271ce10*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0139.571] CloseHandle (hObject=0x248) returned 1 [0139.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.572] GetFileType (hFile=0x248) returned 0x1 [0139.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.572] GetFileType (hFile=0x248) returned 0x1 [0139.572] WriteFile (in: hFile=0x248, lpBuffer=0x271df80*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x271df80*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0139.573] CloseHandle (hObject=0x248) returned 1 [0139.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0139.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x93 [0139.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.577] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.577] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.577] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.577] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0139.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x93 [0139.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.578] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.578] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.578] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.578] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0139.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x93 [0139.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.611] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.611] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0139.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0139.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x93 [0139.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0139.612] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.612] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0139.612] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0139.612] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0139.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0139.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0139.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0139.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0139.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0139.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0139.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0139.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0139.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0139.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0139.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0139.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0140.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x93 [0140.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.136] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.137] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.137] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.137] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0140.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x93 [0140.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.137] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.138] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.138] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.138] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0140.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x93 [0140.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.190] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.191] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0140.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x93 [0140.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.191] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.192] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.192] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.192] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0140.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x93 [0140.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.199] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.199] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.199] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.199] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0140.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x93 [0140.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.200] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.200] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.200] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.200] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0140.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x93 [0140.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.230] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.230] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0140.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x93 [0140.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.231] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.231] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.231] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.231] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0140.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x93 [0140.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.239] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.240] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0140.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x93 [0140.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.241] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0140.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x93 [0140.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.249] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0140.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x93 [0140.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.250] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.250] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.250] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0140.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x93 [0140.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.261] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.261] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.261] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.261] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0140.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x93 [0140.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.262] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.262] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.262] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.262] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0140.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x93 [0140.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.280] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.280] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0140.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x93 [0140.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.281] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.281] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.281] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.281] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.283] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0140.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x93 [0140.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.292] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0140.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x93 [0140.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.292] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.293] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.300] GetFileType (hFile=0x248) returned 0x1 [0140.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.300] GetFileType (hFile=0x248) returned 0x1 [0140.300] WriteFile (in: hFile=0x248, lpBuffer=0x25f20d8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x25f20d8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0140.301] CloseHandle (hObject=0x248) returned 1 [0140.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.302] GetFileType (hFile=0x248) returned 0x1 [0140.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.302] GetFileType (hFile=0x248) returned 0x1 [0140.302] WriteFile (in: hFile=0x248, lpBuffer=0x25f3248*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x25f3248*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0140.303] CloseHandle (hObject=0x248) returned 1 [0140.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.367] GetFileType (hFile=0x248) returned 0x1 [0140.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.367] GetFileType (hFile=0x248) returned 0x1 [0140.367] WriteFile (in: hFile=0x248, lpBuffer=0x25fa0b8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x25fa0b8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0140.368] CloseHandle (hObject=0x248) returned 1 [0140.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0140.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x93 [0140.369] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.370] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.370] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0140.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x93 [0140.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.371] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.371] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.371] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.371] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.374] GetFileType (hFile=0x248) returned 0x1 [0140.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.374] GetFileType (hFile=0x248) returned 0x1 [0140.375] WriteFile (in: hFile=0x248, lpBuffer=0x2607e78*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2607e78*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0140.376] CloseHandle (hObject=0x248) returned 1 [0140.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.377] GetFileType (hFile=0x248) returned 0x1 [0140.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.377] GetFileType (hFile=0x248) returned 0x1 [0140.377] WriteFile (in: hFile=0x248, lpBuffer=0x2608fe8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2608fe8*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0140.378] CloseHandle (hObject=0x248) returned 1 [0140.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.405] GetFileType (hFile=0x248) returned 0x1 [0140.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.405] GetFileType (hFile=0x248) returned 0x1 [0140.405] WriteFile (in: hFile=0x248, lpBuffer=0x260fe58*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x260fe58*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0140.406] CloseHandle (hObject=0x248) returned 1 [0140.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0140.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", lpFilePart=0x0) returned 0x93 [0140.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.407] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0140.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", lpFilePart=0x0) returned 0x93 [0140.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.407] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.408] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.408] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0140.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.410] GetFileType (hFile=0x248) returned 0x1 [0140.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.411] GetFileType (hFile=0x248) returned 0x1 [0140.411] WriteFile (in: hFile=0x248, lpBuffer=0x261dc18*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x261dc18*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0140.412] CloseHandle (hObject=0x248) returned 1 [0140.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0140.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.413] GetFileType (hFile=0x248) returned 0x1 [0140.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.413] GetFileType (hFile=0x248) returned 0x1 [0140.413] WriteFile (in: hFile=0x248, lpBuffer=0x261ed88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x261ed88*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0140.414] CloseHandle (hObject=0x248) returned 1 [0140.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0140.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.416] GetFileType (hFile=0x248) returned 0x1 [0140.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.416] GetFileType (hFile=0x248) returned 0x1 [0140.416] WriteFile (in: hFile=0x248, lpBuffer=0x2625bf8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2625bf8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0140.417] CloseHandle (hObject=0x248) returned 1 [0140.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x95 [0140.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x96 [0140.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.418] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.419] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.419] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.419] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0140.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x95 [0140.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x96 [0140.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0140.419] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.420] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0140.420] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0140.420] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0140.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0140.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0140.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\ENYBENY.TXT", lpFilePart=0x0) returned 0xa1 [0140.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0140.421] GetFileType (hFile=0x248) returned 0x1 [0140.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0140.421] GetFileType (hFile=0x248) returned 0x1 [0140.421] WriteFile (in: hFile=0x248, lpBuffer=0x2633a28*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2633a28*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0140.422] CloseHandle (hObject=0x248) returned 1 [0140.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\ENYBENY.png", lpFilePart=0x0) returned 0xa1 [0140.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0140.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0140.423] GetFileType (hFile=0x248) returned 0x1 [0140.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0140.423] GetFileType (hFile=0x248) returned 0x1 [0140.423] WriteFile (in: hFile=0x248, lpBuffer=0x2634ba0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2634ba0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0140.424] CloseHandle (hObject=0x248) returned 1 [0140.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xcc [0140.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0140.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.081] GetFileType (hFile=0x248) returned 0x1 [0141.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.081] GetFileType (hFile=0x248) returned 0x1 [0141.081] WriteFile (in: hFile=0x248, lpBuffer=0x263ba28*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x263ba28*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0141.082] CloseHandle (hObject=0x248) returned 1 [0141.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x95 [0141.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x96 [0141.083] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.083] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.083] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.083] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.083] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x95 [0141.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x96 [0141.084] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.084] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.084] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\ENYBENY.TXT", lpFilePart=0x0) returned 0xa1 [0141.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.086] GetFileType (hFile=0x248) returned 0x1 [0141.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.086] GetFileType (hFile=0x248) returned 0x1 [0141.086] WriteFile (in: hFile=0x248, lpBuffer=0x2649858*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2649858*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0141.087] CloseHandle (hObject=0x248) returned 1 [0141.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\ENYBENY.png", lpFilePart=0x0) returned 0xa1 [0141.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.088] GetFileType (hFile=0x248) returned 0x1 [0141.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.088] GetFileType (hFile=0x248) returned 0x1 [0141.088] WriteFile (in: hFile=0x248, lpBuffer=0x264a9d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x264a9d0*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0141.090] CloseHandle (hObject=0x248) returned 1 [0141.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xcc [0141.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.092] GetFileType (hFile=0x248) returned 0x1 [0141.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.092] GetFileType (hFile=0x248) returned 0x1 [0141.092] WriteFile (in: hFile=0x248, lpBuffer=0x2651858*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x2651858*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0141.093] CloseHandle (hObject=0x248) returned 1 [0141.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", lpFilePart=0x0) returned 0x92 [0141.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x93 [0141.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.095] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.095] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", lpFilePart=0x0) returned 0x92 [0141.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x93 [0141.096] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.096] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.096] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.097] GetFileType (hFile=0x248) returned 0x1 [0141.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.098] GetFileType (hFile=0x248) returned 0x1 [0141.098] WriteFile (in: hFile=0x248, lpBuffer=0x265f618*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x265f618*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0141.099] CloseHandle (hObject=0x248) returned 1 [0141.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.100] GetFileType (hFile=0x248) returned 0x1 [0141.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.100] GetFileType (hFile=0x248) returned 0x1 [0141.100] WriteFile (in: hFile=0x248, lpBuffer=0x2660788*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2660788*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0141.102] CloseHandle (hObject=0x248) returned 1 [0141.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.104] GetFileType (hFile=0x248) returned 0x1 [0141.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.105] GetFileType (hFile=0x248) returned 0x1 [0141.105] WriteFile (in: hFile=0x248, lpBuffer=0x26675f8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26675f8*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0141.106] CloseHandle (hObject=0x248) returned 1 [0141.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", lpFilePart=0x0) returned 0x92 [0141.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x93 [0141.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.106] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.107] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.107] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.107] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", lpFilePart=0x0) returned 0x92 [0141.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x93 [0141.107] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.107] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.108] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.108] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.109] GetFileType (hFile=0x248) returned 0x1 [0141.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.109] GetFileType (hFile=0x248) returned 0x1 [0141.110] WriteFile (in: hFile=0x248, lpBuffer=0x26753b8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x26753b8*, lpNumberOfBytesWritten=0x1ad798*=0x394, lpOverlapped=0x0) returned 1 [0141.111] CloseHandle (hObject=0x248) returned 1 [0141.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.112] GetFileType (hFile=0x248) returned 0x1 [0141.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.112] GetFileType (hFile=0x248) returned 0x1 [0141.112] WriteFile (in: hFile=0x248, lpBuffer=0x2676528*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad8d8, lpOverlapped=0x0 | out: lpBuffer=0x2676528*, lpNumberOfBytesWritten=0x1ad8d8*=0x50df, lpOverlapped=0x0) returned 1 [0141.113] CloseHandle (hObject=0x248) returned 1 [0141.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.235] GetFileType (hFile=0x248) returned 0x1 [0141.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.235] GetFileType (hFile=0x248) returned 0x1 [0141.235] WriteFile (in: hFile=0x248, lpBuffer=0x267d398*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad798, lpOverlapped=0x0 | out: lpBuffer=0x267d398*, lpNumberOfBytesWritten=0x1ad798*=0xc6, lpOverlapped=0x0) returned 1 [0141.236] CloseHandle (hObject=0x248) returned 1 [0141.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", lpFilePart=0x0) returned 0x92 [0141.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x93 [0141.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.238] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.238] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.238] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.238] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", lpFilePart=0x0) returned 0x92 [0141.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x93 [0141.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.239] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.240] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.240] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", lpFilePart=0x0) returned 0x92 [0141.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x93 [0141.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.248] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.248] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.248] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.248] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", lpFilePart=0x0) returned 0x92 [0141.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x93 [0141.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.249] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.249] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", lpFilePart=0x0) returned 0x92 [0141.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x93 [0141.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.258] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.258] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.258] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.258] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", lpFilePart=0x0) returned 0x92 [0141.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x93 [0141.258] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.258] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.259] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.259] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.259] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", lpFilePart=0x0) returned 0x92 [0141.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x93 [0141.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.293] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.293] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", lpFilePart=0x0) returned 0x92 [0141.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x93 [0141.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.294] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.294] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", lpFilePart=0x0) returned 0x92 [0141.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x93 [0141.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.536] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.536] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.536] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.536] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", lpFilePart=0x0) returned 0x92 [0141.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x93 [0141.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.537] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.537] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", lpFilePart=0x0) returned 0x92 [0141.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x93 [0141.546] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.546] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.546] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.546] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.547] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", lpFilePart=0x0) returned 0x92 [0141.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x93 [0141.547] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.547] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.547] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.548] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.548] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", lpFilePart=0x0) returned 0x92 [0141.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", lpFilePart=0x0) returned 0x93 [0141.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.812] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.812] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", lpFilePart=0x0) returned 0x92 [0141.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", lpFilePart=0x0) returned 0x93 [0141.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.813] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.813] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.813] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.813] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", lpFilePart=0x0) returned 0x92 [0141.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", lpFilePart=0x0) returned 0x93 [0141.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.824] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.824] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", lpFilePart=0x0) returned 0x92 [0141.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", lpFilePart=0x0) returned 0x93 [0141.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.825] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.825] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.825] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.826] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", lpFilePart=0x0) returned 0x92 [0141.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x93 [0141.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.834] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.835] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.835] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.835] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", lpFilePart=0x0) returned 0x92 [0141.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x93 [0141.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.836] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.836] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.836] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.836] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", lpFilePart=0x0) returned 0x92 [0141.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x93 [0141.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.844] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.844] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", lpFilePart=0x0) returned 0x92 [0141.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x93 [0141.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.845] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.845] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", lpFilePart=0x0) returned 0x92 [0141.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x93 [0141.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.901] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", lpFilePart=0x0) returned 0x92 [0141.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x93 [0141.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.901] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.902] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.902] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.902] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", lpFilePart=0x0) returned 0x92 [0141.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", lpFilePart=0x0) returned 0x93 [0141.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.908] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.909] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", lpFilePart=0x0) returned 0x92 [0141.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", lpFilePart=0x0) returned 0x93 [0141.909] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.909] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.909] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9e [0141.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\ENYBENY.png", lpFilePart=0x0) returned 0x9e [0141.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc9 [0141.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x95 [0141.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x96 [0141.936] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.936] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.936] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.936] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.936] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0141.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1ad3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x95 [0141.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x1ad340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x96 [0141.937] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x1ad550 | out: lpFindFileData=0x1ad550) returned 0x2e0600 [0141.937] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.937] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 1 [0141.937] FindNextFileW (in: hFindFile=0x2e0600, lpFindFileData=0x1ad5a0 | out: lpFindFileData=0x1ad5a0) returned 0 [0141.937] FindClose (in: hFindFile=0x2e0600 | out: hFindFile=0x2e0600) returned 1 [0141.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad800) returned 1 [0141.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7c0) returned 1 [0141.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\ENYBENY.TXT", lpFilePart=0x0) returned 0xa1 [0141.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x248 [0141.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0141.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\ENYBENY.png", lpFilePart=0x0) returned 0xa1 [0141.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7b0) returned 1 [0141.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0141.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad720) returned 1 [0141.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xcc [0141.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad6f0) returned 1 [0141.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0142.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad660) returned 1 [0142.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9b [0142.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0142.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0142.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0142.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ENYBENY.png", lpFilePart=0x0) returned 0x9b [0142.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0142.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0142.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0142.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc6 [0142.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0142.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0142.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0142.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0142.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", lpFilePart=0x0) returned 0x90 [0142.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", lpFilePart=0x0) returned 0x91 [0142.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0780 [0142.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0142.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0142.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0142.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0142.464] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0142.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0142.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0142.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0142.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", lpFilePart=0x0) returned 0x90 [0142.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", lpFilePart=0x0) returned 0x91 [0142.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0780 [0142.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0142.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0142.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0142.465] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0142.465] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0142.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0142.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0142.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\ENYBENY.TXT", lpFilePart=0x0) returned 0x9c [0142.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0142.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0142.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0142.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\ENYBENY.png", lpFilePart=0x0) returned 0x9c [0142.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0142.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0142.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0142.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc7 [0142.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0142.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0142.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0142.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x92 [0142.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0142.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0142.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0142.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\ENYBENY.png", lpFilePart=0x0) returned 0x92 [0142.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0142.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0142.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0142.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbd [0142.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0142.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0142.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0142.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.TXT", lpFilePart=0x0) returned 0x83 [0142.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0142.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0142.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0142.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.png", lpFilePart=0x0) returned 0x83 [0142.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0142.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0142.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0142.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xae [0142.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0142.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0143.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ENYBENY.TXT", lpFilePart=0x0) returned 0x62 [0143.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.106] WriteFile (in: hFile=0x23c, lpBuffer=0x25f1820*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x25f1820*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0143.107] CloseHandle (hObject=0x23c) returned 1 [0143.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ENYBENY.png", lpFilePart=0x0) returned 0x62 [0143.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0143.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.108] GetFileType (hFile=0x23c) returned 0x1 [0143.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0143.108] GetFileType (hFile=0x23c) returned 0x1 [0143.108] WriteFile (in: hFile=0x23c, lpBuffer=0x25f2918*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x25f2918*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0143.109] CloseHandle (hObject=0x23c) returned 1 [0143.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8d [0143.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.110] GetFileType (hFile=0x23c) returned 0x1 [0143.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.110] GetFileType (hFile=0x23c) returned 0x1 [0143.110] WriteFile (in: hFile=0x23c, lpBuffer=0x25f9620*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x25f9620*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0143.111] CloseHandle (hObject=0x23c) returned 1 [0143.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", lpFilePart=0x0) returned 0x59 [0143.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", lpFilePart=0x0) returned 0x5a [0143.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.113] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", lpFilePart=0x0) returned 0x59 [0143.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", lpFilePart=0x0) returned 0x5a [0143.114] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.114] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.115] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.115] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\ENYBENY.TXT", lpFilePart=0x0) returned 0x65 [0143.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.118] GetFileType (hFile=0x23c) returned 0x1 [0143.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.119] GetFileType (hFile=0x23c) returned 0x1 [0143.119] WriteFile (in: hFile=0x23c, lpBuffer=0x2606920*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2606920*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0143.120] CloseHandle (hObject=0x23c) returned 1 [0143.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\ENYBENY.png", lpFilePart=0x0) returned 0x65 [0143.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0143.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.121] GetFileType (hFile=0x23c) returned 0x1 [0143.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0143.121] GetFileType (hFile=0x23c) returned 0x1 [0143.121] WriteFile (in: hFile=0x23c, lpBuffer=0x2607a20*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2607a20*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0143.123] CloseHandle (hObject=0x23c) returned 1 [0143.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x90 [0143.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.134] GetFileType (hFile=0x23c) returned 0x1 [0143.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.135] GetFileType (hFile=0x23c) returned 0x1 [0143.135] WriteFile (in: hFile=0x23c, lpBuffer=0x260e740*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x260e740*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0143.136] CloseHandle (hObject=0x23c) returned 1 [0143.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", lpFilePart=0x0) returned 0x5c [0143.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", lpFilePart=0x0) returned 0x5d [0143.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.137] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.137] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.137] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.137] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", lpFilePart=0x0) returned 0x5c [0143.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", lpFilePart=0x0) returned 0x5d [0143.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.138] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.138] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.138] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.138] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.138] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0143.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.141] GetFileType (hFile=0x23c) returned 0x1 [0143.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.141] GetFileType (hFile=0x23c) returned 0x1 [0143.142] WriteFile (in: hFile=0x23c, lpBuffer=0x261bb40*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x261bb40*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0143.143] CloseHandle (hObject=0x23c) returned 1 [0143.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0143.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0143.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.147] GetFileType (hFile=0x23c) returned 0x1 [0143.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0143.147] GetFileType (hFile=0x23c) returned 0x1 [0143.147] WriteFile (in: hFile=0x23c, lpBuffer=0x261cc48*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x261cc48*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0143.148] CloseHandle (hObject=0x23c) returned 1 [0143.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0143.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.422] GetFileType (hFile=0x23c) returned 0x1 [0143.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.422] GetFileType (hFile=0x23c) returned 0x1 [0143.422] WriteFile (in: hFile=0x23c, lpBuffer=0x2623970*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2623970*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0143.423] CloseHandle (hObject=0x23c) returned 1 [0143.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpFilePart=0x0) returned 0x64 [0143.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", lpFilePart=0x0) returned 0x65 [0143.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.424] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpFilePart=0x0) returned 0x64 [0143.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", lpFilePart=0x0) returned 0x65 [0143.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.425] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.425] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.425] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.425] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x85 [0143.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x86 [0143.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0143.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0143.428] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0143.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0143.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x85 [0143.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x86 [0143.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0143.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.430] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.430] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.430] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.430] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.430] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0143.430] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0143.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0143.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.TXT", lpFilePart=0x0) returned 0x91 [0143.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0143.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.432] GetFileType (hFile=0x23c) returned 0x1 [0143.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0143.432] GetFileType (hFile=0x23c) returned 0x1 [0143.433] WriteFile (in: hFile=0x23c, lpBuffer=0x2635950*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2635950*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0143.434] CloseHandle (hObject=0x23c) returned 1 [0143.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.png", lpFilePart=0x0) returned 0x91 [0143.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0143.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.434] GetFileType (hFile=0x23c) returned 0x1 [0143.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0143.434] GetFileType (hFile=0x23c) returned 0x1 [0143.434] WriteFile (in: hFile=0x23c, lpBuffer=0x2636aa8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x2636aa8*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0143.435] CloseHandle (hObject=0x23c) returned 1 [0143.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbc [0143.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0143.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.436] GetFileType (hFile=0x23c) returned 0x1 [0143.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0143.436] GetFileType (hFile=0x23c) returned 0x1 [0143.436] WriteFile (in: hFile=0x23c, lpBuffer=0x263d8d0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263d8d0*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0143.437] CloseHandle (hObject=0x23c) returned 1 [0143.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ENYBENY.TXT", lpFilePart=0x0) returned 0x70 [0143.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.438] GetFileType (hFile=0x23c) returned 0x1 [0143.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.438] GetFileType (hFile=0x23c) returned 0x1 [0143.438] WriteFile (in: hFile=0x23c, lpBuffer=0x2647da8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2647da8*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0143.439] CloseHandle (hObject=0x23c) returned 1 [0143.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ENYBENY.png", lpFilePart=0x0) returned 0x70 [0143.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0143.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.440] GetFileType (hFile=0x23c) returned 0x1 [0143.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0143.440] GetFileType (hFile=0x23c) returned 0x1 [0143.440] WriteFile (in: hFile=0x23c, lpBuffer=0x2648ec0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2648ec0*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0143.441] CloseHandle (hObject=0x23c) returned 1 [0143.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x9b [0143.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.443] GetFileType (hFile=0x23c) returned 0x1 [0143.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.443] GetFileType (hFile=0x23c) returned 0x1 [0143.443] WriteFile (in: hFile=0x23c, lpBuffer=0x264fc18*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x264fc18*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0143.444] CloseHandle (hObject=0x23c) returned 1 [0143.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpFilePart=0x0) returned 0x59 [0143.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", lpFilePart=0x0) returned 0x5a [0143.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.448] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.448] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.448] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.448] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.448] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpFilePart=0x0) returned 0x59 [0143.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", lpFilePart=0x0) returned 0x5a [0143.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.450] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.450] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.450] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.450] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.450] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\ENYBENY.TXT", lpFilePart=0x0) returned 0x65 [0143.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.452] GetFileType (hFile=0x23c) returned 0x1 [0143.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.452] GetFileType (hFile=0x23c) returned 0x1 [0143.452] WriteFile (in: hFile=0x23c, lpBuffer=0x265d680*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x265d680*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0143.453] CloseHandle (hObject=0x23c) returned 1 [0143.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\ENYBENY.png", lpFilePart=0x0) returned 0x65 [0143.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0143.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.459] GetFileType (hFile=0x23c) returned 0x1 [0143.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0143.459] GetFileType (hFile=0x23c) returned 0x1 [0143.459] WriteFile (in: hFile=0x23c, lpBuffer=0x265e780*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x265e780*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0143.460] CloseHandle (hObject=0x23c) returned 1 [0143.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x90 [0143.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.461] GetFileType (hFile=0x23c) returned 0x1 [0143.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.461] GetFileType (hFile=0x23c) returned 0x1 [0143.461] WriteFile (in: hFile=0x23c, lpBuffer=0x26654a0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x26654a0*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0143.462] CloseHandle (hObject=0x23c) returned 1 [0143.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpFilePart=0x0) returned 0x63 [0143.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", lpFilePart=0x0) returned 0x64 [0143.462] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.463] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpFilePart=0x0) returned 0x63 [0143.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", lpFilePart=0x0) returned 0x64 [0143.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.464] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x84 [0143.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", lpFilePart=0x0) returned 0x85 [0143.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0143.465] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0143.466] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0143.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0143.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x84 [0143.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", lpFilePart=0x0) returned 0x85 [0143.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0143.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0143.469] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0143.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0143.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.TXT", lpFilePart=0x0) returned 0x90 [0143.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0143.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0143.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.png", lpFilePart=0x0) returned 0x90 [0143.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0143.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0143.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xbb [0143.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0143.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0143.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6f [0143.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\ENYBENY.png", lpFilePart=0x0) returned 0x6f [0143.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0143.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0143.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x9a [0143.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x5c [0143.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", lpFilePart=0x0) returned 0x5d [0143.480] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.480] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.481] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.481] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.481] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x5c [0143.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", lpFilePart=0x0) returned 0x5d [0143.481] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0143.481] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.481] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0143.481] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0143.482] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0143.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0143.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x82 [0143.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\", lpFilePart=0x0) returned 0x83 [0143.482] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0143.483] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.483] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.483] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.483] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0143.483] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0143.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0143.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x82 [0143.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\", lpFilePart=0x0) returned 0x83 [0143.483] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0143.483] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.484] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.484] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0143.484] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0143.484] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0143.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0143.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\ENYBENY.TXT", lpFilePart=0x0) returned 0x8e [0143.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0143.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0143.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\ENYBENY.png", lpFilePart=0x0) returned 0x8e [0143.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0143.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0143.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xb9 [0143.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0143.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0143.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0143.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0143.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0143.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0143.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0143.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0143.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0143.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ENYBENY.TXT", lpFilePart=0x0) returned 0x57 [0143.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ENYBENY.png", lpFilePart=0x0) returned 0x57 [0143.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x82 [0143.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x4f [0143.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", lpFilePart=0x0) returned 0x50 [0143.500] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.501] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.501] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.502] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x4f [0143.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", lpFilePart=0x0) returned 0x50 [0143.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.502] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.502] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.502] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5b [0143.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\ENYBENY.png", lpFilePart=0x0) returned 0x5b [0143.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x86 [0143.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x54 [0143.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", lpFilePart=0x0) returned 0x55 [0143.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.507] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.507] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.507] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x54 [0143.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", lpFilePart=0x0) returned 0x55 [0143.508] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.508] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.508] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.508] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0143.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0143.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0143.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x50 [0143.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", lpFilePart=0x0) returned 0x51 [0143.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.513] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.513] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.513] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x50 [0143.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", lpFilePart=0x0) returned 0x51 [0143.514] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.514] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.514] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.514] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5c [0143.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\ENYBENY.png", lpFilePart=0x0) returned 0x5c [0143.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x87 [0143.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x4f [0143.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", lpFilePart=0x0) returned 0x50 [0143.520] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.520] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.521] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.521] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x4f [0143.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", lpFilePart=0x0) returned 0x50 [0143.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.521] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.521] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.521] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5b [0143.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\ENYBENY.png", lpFilePart=0x0) returned 0x5b [0143.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x86 [0143.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x49 [0143.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", lpFilePart=0x0) returned 0x4a [0143.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.526] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.526] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.526] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x49 [0143.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", lpFilePart=0x0) returned 0x4a [0143.526] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.526] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.526] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.527] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x55 [0143.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\ENYBENY.png", lpFilePart=0x0) returned 0x55 [0143.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x80 [0143.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x55 [0143.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", lpFilePart=0x0) returned 0x56 [0143.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.532] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.532] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.532] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x55 [0143.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", lpFilePart=0x0) returned 0x56 [0143.533] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.533] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.533] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.533] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\ENYBENY.TXT", lpFilePart=0x0) returned 0x61 [0143.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\ENYBENY.png", lpFilePart=0x0) returned 0x61 [0143.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8c [0143.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x4e [0143.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", lpFilePart=0x0) returned 0x4f [0143.540] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.541] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x4e [0143.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", lpFilePart=0x0) returned 0x4f [0143.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.541] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5a [0143.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\ENYBENY.png", lpFilePart=0x0) returned 0x5a [0143.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x85 [0143.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x4f [0143.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", lpFilePart=0x0) returned 0x50 [0143.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.557] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x4f [0143.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", lpFilePart=0x0) returned 0x50 [0143.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0143.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0143.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0143.557] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0143.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0143.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5b [0143.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\ENYBENY.png", lpFilePart=0x0) returned 0x5b [0143.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0143.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0143.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x86 [0143.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0143.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0143.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4f [0143.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0143.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0143.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\ENYBENY.png", lpFilePart=0x0) returned 0x4f [0143.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0143.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0143.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7a [0143.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0143.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0143.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\ENYBENY.TXT", lpFilePart=0x0) returned 0x45 [0143.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0143.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0143.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\ENYBENY.png", lpFilePart=0x0) returned 0x45 [0143.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0143.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x70 [0143.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0143.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0143.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0143.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x3f [0143.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\", lpFilePart=0x0) returned 0x40 [0143.731] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0143.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0143.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0143.732] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0143.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0143.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0143.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x3f [0143.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\", lpFilePart=0x0) returned 0x40 [0143.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0143.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0143.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0143.733] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0143.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0143.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0143.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0143.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0143.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0143.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0143.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0143.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0143.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0143.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3e [0143.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0143.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0143.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\ENYBENY.png", lpFilePart=0x0) returned 0x3e [0143.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0143.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0143.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x69 [0143.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0143.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0143.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0143.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", lpFilePart=0x0) returned 0x33 [0143.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\", lpFilePart=0x0) returned 0x34 [0143.767] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0xffffffffffffffff [0143.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0143.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3f [0143.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0143.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.773] GetFileType (hFile=0x23c) returned 0x1 [0143.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0143.773] GetFileType (hFile=0x23c) returned 0x1 [0143.773] WriteFile (in: hFile=0x23c, lpBuffer=0x27c6fc8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x27c6fc8*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0143.774] CloseHandle (hObject=0x23c) returned 1 [0143.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\ENYBENY.png", lpFilePart=0x0) returned 0x3f [0143.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0143.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.775] GetFileType (hFile=0x23c) returned 0x1 [0143.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0143.775] GetFileType (hFile=0x23c) returned 0x1 [0143.775] WriteFile (in: hFile=0x23c, lpBuffer=0x27c8078*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x27c8078*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0143.777] CloseHandle (hObject=0x23c) returned 1 [0143.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6a [0143.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0143.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.845] GetFileType (hFile=0x23c) returned 0x1 [0143.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0143.845] GetFileType (hFile=0x23c) returned 0x1 [0143.845] WriteFile (in: hFile=0x23c, lpBuffer=0x27ceca8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x27ceca8*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0143.846] CloseHandle (hObject=0x23c) returned 1 [0143.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0143.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x35 [0143.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x36 [0143.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0143.848] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.849] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.849] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.849] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.849] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.849] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.849] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.851] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.851] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.851] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.851] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.851] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.851] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.852] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.852] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0143.852] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0143.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0143.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0143.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x35 [0143.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x36 [0143.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0143.853] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.853] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.853] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.853] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.853] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.853] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.854] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.854] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.854] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.854] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.854] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.854] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.854] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.854] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.855] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.855] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.855] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.855] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.855] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.855] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.856] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0143.856] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0143.856] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0143.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0143.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0143.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x41 [0143.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x42 [0143.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0143.857] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0143.857] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0143.857] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0143.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0143.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0143.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x41 [0143.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x42 [0143.857] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0143.857] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0143.858] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0143.858] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0143.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0143.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4d [0143.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0143.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.860] GetFileType (hFile=0x23c) returned 0x1 [0143.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0143.861] GetFileType (hFile=0x23c) returned 0x1 [0143.861] WriteFile (in: hFile=0x23c, lpBuffer=0x27e19b8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x27e19b8*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0143.862] CloseHandle (hObject=0x23c) returned 1 [0143.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\ENYBENY.png", lpFilePart=0x0) returned 0x4d [0143.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.864] GetFileType (hFile=0x23c) returned 0x1 [0143.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0143.864] GetFileType (hFile=0x23c) returned 0x1 [0143.864] WriteFile (in: hFile=0x23c, lpBuffer=0x27e2a88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x27e2a88*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0143.865] CloseHandle (hObject=0x23c) returned 1 [0143.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x78 [0143.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0143.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.866] GetFileType (hFile=0x23c) returned 0x1 [0143.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0143.866] GetFileType (hFile=0x23c) returned 0x1 [0143.867] WriteFile (in: hFile=0x23c, lpBuffer=0x27e9718*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x27e9718*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0143.868] CloseHandle (hObject=0x23c) returned 1 [0143.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0143.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x42 [0143.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x43 [0143.868] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0143.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0143.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0143.869] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0143.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0143.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0143.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x42 [0143.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x43 [0143.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0143.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0143.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0143.870] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0143.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0143.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0143.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4e [0143.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0143.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.874] GetFileType (hFile=0x23c) returned 0x1 [0143.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0143.874] GetFileType (hFile=0x23c) returned 0x1 [0143.874] WriteFile (in: hFile=0x23c, lpBuffer=0x25f7a70*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x25f7a70*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0143.875] CloseHandle (hObject=0x23c) returned 1 [0143.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\ENYBENY.png", lpFilePart=0x0) returned 0x4e [0143.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0143.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0143.876] GetFileType (hFile=0x23c) returned 0x1 [0143.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0143.876] GetFileType (hFile=0x23c) returned 0x1 [0143.876] WriteFile (in: hFile=0x23c, lpBuffer=0x25f8b40*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x25f8b40*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0143.877] CloseHandle (hObject=0x23c) returned 1 [0143.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x79 [0143.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0143.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0143.878] GetFileType (hFile=0x23c) returned 0x1 [0143.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0143.878] GetFileType (hFile=0x23c) returned 0x1 [0143.878] WriteFile (in: hFile=0x23c, lpBuffer=0x25ff7d0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x25ff7d0*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0143.880] CloseHandle (hObject=0x23c) returned 1 [0143.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0143.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x3b [0143.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x3c [0143.880] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0144.089] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.089] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.090] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.090] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.090] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0144.090] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0144.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0144.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0144.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x3b [0144.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x3c [0144.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0144.092] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.092] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.092] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.092] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.092] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0144.092] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0144.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0144.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.093] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ad690, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0144.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x4c [0144.095] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ad690, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0144.095] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad660, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.095] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad630, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x4d [0144.096] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad630, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.149] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.149] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.150] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.150] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.150] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.150] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.151] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ad690, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0144.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x4c [0144.151] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ad690, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0144.152] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad660, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.152] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad630, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x4d [0144.152] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad630, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.154] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.155] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.155] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.155] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.155] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.155] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.158] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad500, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\ENYBENY.TXT", lpFilePart=0x0) returned 0x58 [0144.158] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\ENYBENY.TXT", lpszLongPath=0x1ad500, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.159] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ad470, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0144.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.161] GetFileType (hFile=0x23c) returned 0x1 [0144.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.162] GetFileType (hFile=0x23c) returned 0x1 [0144.162] WriteFile (in: hFile=0x23c, lpBuffer=0x2610070*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2610070*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0144.163] CloseHandle (hObject=0x23c) returned 1 [0144.163] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad5c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\ENYBENY.png", lpFilePart=0x0) returned 0x58 [0144.163] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\ENYBENY.png", lpszLongPath=0x1ad5c0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.163] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ad530, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0144.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0144.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0144.164] GetFileType (hFile=0x23c) returned 0x1 [0144.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0144.165] GetFileType (hFile=0x23c) returned 0x1 [0144.165] WriteFile (in: hFile=0x23c, lpBuffer=0x2611158*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2611158*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0144.166] CloseHandle (hObject=0x23c) returned 1 [0144.166] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x1ad500, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0144.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x83 [0144.166] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpszLongPath=0x1ad500, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.166] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x1ad420, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0144.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.167] GetFileType (hFile=0x23c) returned 0x1 [0144.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.168] GetFileType (hFile=0x23c) returned 0x1 [0144.168] WriteFile (in: hFile=0x23c, lpBuffer=0x2617e20*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2617e20*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0144.168] CloseHandle (hObject=0x23c) returned 1 [0144.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.169] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ad690, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0144.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x63 [0144.169] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ad690, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0144.170] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad660, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.170] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad630, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x64 [0144.170] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad630, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.172] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.172] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.172] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.172] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.172] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.173] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ad690, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0144.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x63 [0144.173] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ad690, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0144.174] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad660, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.174] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad630, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x64 [0144.174] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad630, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.176] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.176] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.176] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.176] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0144.177] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad610, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.177] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ad610, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0144.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x6e [0144.178] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ad610, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0144.178] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad5e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.178] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad5e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.179] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad5b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.179] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad5b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x6f [0144.180] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad5b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0144.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0144.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0144.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0144.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0144.182] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0144.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0144.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0144.182] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad610, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.183] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ad610, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0144.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x6e [0144.183] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ad610, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0144.184] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad5e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.184] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad5e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.184] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad5b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.185] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad5b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x6f [0144.185] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad5b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.187] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0144.187] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0144.187] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0144.187] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0144.188] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0144.188] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0144.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0144.188] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad480, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.188] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad480, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\ENYBENY.TXT", lpFilePart=0x0) returned 0x7a [0144.189] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\ENYBENY.TXT", lpszLongPath=0x1ad480, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.189] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ad3f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0144.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0144.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0144.416] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad540, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.417] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad540, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\ENYBENY.png", lpFilePart=0x0) returned 0x7a [0144.417] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\ENYBENY.png", lpszLongPath=0x1ad540, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.418] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ad4b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0144.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0144.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0144.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0144.420] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad480, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.420] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x1ad480, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0144.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa5 [0144.421] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpszLongPath=0x1ad480, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.421] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x1ad3a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0144.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0144.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0144.423] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad500, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6f [0144.423] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\ENYBENY.TXT", lpszLongPath=0x1ad500, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.423] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ad470, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0144.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.425] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad5c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\ENYBENY.png", lpFilePart=0x0) returned 0x6f [0144.426] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\ENYBENY.png", lpszLongPath=0x1ad5c0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.426] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ad530, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0144.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0144.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0144.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0144.428] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1ad500, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0144.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x9a [0144.428] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpszLongPath=0x1ad500, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.428] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1ad420, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0144.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\ENYBENY.TXT", lpFilePart=0x0) returned 0x47 [0144.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0144.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0144.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\ENYBENY.png", lpFilePart=0x0) returned 0x47 [0144.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0144.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0144.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0144.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x72 [0144.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0144.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0144.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0144.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x41 [0144.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x42 [0144.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0144.438] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.438] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.438] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.438] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.439] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.439] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.439] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.439] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0144.439] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0144.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0144.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0144.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x41 [0144.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x42 [0144.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0144.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0144.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0144.441] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0144.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0144.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x4a [0144.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x4b [0144.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.443] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.443] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.443] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.443] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.444] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x4a [0144.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x4b [0144.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.444] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.444] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.444] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.444] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.444] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x56 [0144.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\ENYBENY.png", lpFilePart=0x0) returned 0x56 [0144.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0144.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0144.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0144.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x81 [0144.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x4a [0144.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x4b [0144.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.541] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.541] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x4a [0144.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x4b [0144.542] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.542] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.542] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.542] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.542] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.542] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\ENYBENY.TXT", lpFilePart=0x0) returned 0x56 [0144.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\ENYBENY.png", lpFilePart=0x0) returned 0x56 [0144.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0144.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0144.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0144.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x81 [0144.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x4a [0144.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x4b [0144.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.922] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.922] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.922] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.923] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.923] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0144.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x4a [0144.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x4b [0144.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0144.923] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.923] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.924] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0144.924] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0144.924] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0144.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0144.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0144.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\ENYBENY.TXT", lpFilePart=0x0) returned 0x56 [0144.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0144.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0144.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\ENYBENY.png", lpFilePart=0x0) returned 0x56 [0144.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0144.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0144.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0144.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x81 [0144.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0144.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0145.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0145.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x4a [0145.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x4b [0145.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0145.181] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0145.181] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0145.181] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0145.181] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0145.181] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0145.181] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0145.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0145.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0145.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x4a [0145.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x4b [0145.182] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0145.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0145.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0145.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0145.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0145.182] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0145.182] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0145.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0145.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ENYBENY.TXT", lpFilePart=0x0) returned 0x56 [0145.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0145.183] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0145.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ENYBENY.png", lpFilePart=0x0) returned 0x56 [0145.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0145.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0145.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0145.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x81 [0145.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0145.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0145.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4d [0145.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\ENYBENY.png", lpFilePart=0x0) returned 0x4d [0145.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0145.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0145.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0145.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x78 [0145.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x3b [0145.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x3c [0145.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.456] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.456] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.456] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.456] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x3b [0145.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x3c [0145.456] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.457] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.457] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.457] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.457] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\ENYBENY.TXT", lpFilePart=0x0) returned 0x47 [0145.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\ENYBENY.png", lpFilePart=0x0) returned 0x47 [0145.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0145.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0145.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0145.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x72 [0145.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3b [0145.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3c [0145.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.464] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3b [0145.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3c [0145.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.465] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.465] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\ENYBENY.TXT", lpFilePart=0x0) returned 0x47 [0145.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\ENYBENY.png", lpFilePart=0x0) returned 0x47 [0145.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0145.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0145.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0145.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x72 [0145.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3c [0145.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3d [0145.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.472] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.472] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.472] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3c [0145.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3d [0145.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.472] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.473] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.473] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\ENYBENY.TXT", lpFilePart=0x0) returned 0x48 [0145.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\ENYBENY.png", lpFilePart=0x0) returned 0x48 [0145.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0145.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0145.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0145.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x73 [0145.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3d [0145.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x3e [0145.478] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.479] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.479] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.479] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3d [0145.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x3e [0145.480] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.480] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.480] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.480] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\ENYBENY.TXT", lpFilePart=0x0) returned 0x49 [0145.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\ENYBENY.png", lpFilePart=0x0) returned 0x49 [0145.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0145.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0145.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0145.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x74 [0145.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3d [0145.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x3e [0145.485] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.485] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.485] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.486] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3d [0145.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x3e [0145.486] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.486] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.486] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.486] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x49 [0145.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\ENYBENY.png", lpFilePart=0x0) returned 0x49 [0145.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0145.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0145.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0145.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x74 [0145.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0145.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0145.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0145.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x47 [0145.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x48 [0145.491] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.787] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.787] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.788] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.788] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.788] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.788] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.788] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.788] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.788] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0145.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x47 [0145.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x48 [0145.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0145.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0145.790] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0145.791] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0145.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0145.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0145.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.EnyBenied", lpFilePart=0x0) returned 0x5d [0145.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0145.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0145.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0146.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0146.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0146.168] GetFileType (hFile=0x238) returned 0x1 [0146.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.168] GetFileType (hFile=0x238) returned 0x1 [0146.168] ReadFile (in: hFile=0x238, lpBuffer=0x266d2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x266d2e0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0146.253] ReadFile (in: hFile=0x238, lpBuffer=0x266d2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x266d2e0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0146.338] ReadFile (in: hFile=0x238, lpBuffer=0x266d2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x266d2e0*, lpNumberOfBytesRead=0x1adc08*=0xfb0, lpOverlapped=0x0) returned 1 [0146.339] ReadFile (in: hFile=0x238, lpBuffer=0x266d278, nNumberOfBytesToRead=0x50, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x266d278*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0146.339] ReadFile (in: hFile=0x238, lpBuffer=0x266d2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x266d2e0*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0146.339] CloseHandle (hObject=0x238) returned 1 [0146.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0146.339] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt")) returned 1 [0146.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0146.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x50 [0146.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x51 [0146.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0146.342] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.342] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.342] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.342] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.342] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.343] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.343] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0146.343] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0146.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0146.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0146.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x50 [0146.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x51 [0146.344] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0146.344] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.344] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.344] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.344] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.344] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.344] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0146.345] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0146.345] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0146.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0146.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0146.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", lpFilePart=0x0) returned 0x59 [0146.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", lpFilePart=0x0) returned 0x5a [0146.345] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0146.346] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.346] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0146.346] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0146.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0146.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", lpFilePart=0x0) returned 0x59 [0146.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", lpFilePart=0x0) returned 0x5a [0146.346] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0146.347] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.347] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0146.347] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0146.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\ENYBENY.TXT", lpFilePart=0x0) returned 0x65 [0146.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0146.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0146.351] GetFileType (hFile=0x23c) returned 0x1 [0146.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0146.351] GetFileType (hFile=0x23c) returned 0x1 [0146.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\ENYBENY.png", lpFilePart=0x0) returned 0x65 [0146.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0146.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0146.353] GetFileType (hFile=0x23c) returned 0x1 [0146.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0146.353] GetFileType (hFile=0x23c) returned 0x1 [0146.353] WriteFile (in: hFile=0x23c, lpBuffer=0x26818b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x26818b0*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0146.354] CloseHandle (hObject=0x23c) returned 1 [0146.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x90 [0146.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0146.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0146.355] GetFileType (hFile=0x23c) returned 0x1 [0146.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0146.355] GetFileType (hFile=0x23c) returned 0x1 [0146.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0146.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", lpFilePart=0x0) returned 0x59 [0146.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", lpFilePart=0x0) returned 0x5a [0146.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0146.357] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.357] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.357] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0146.358] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0146.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0146.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", lpFilePart=0x0) returned 0x59 [0146.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", lpFilePart=0x0) returned 0x5a [0146.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0146.358] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.358] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.358] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0146.359] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0146.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.EnyBenied", lpFilePart=0x0) returned 0x74 [0146.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0146.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0146.361] GetFileType (hFile=0x23c) returned 0x1 [0146.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0146.361] GetFileType (hFile=0x23c) returned 0x1 [0146.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0146.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0146.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0146.783] GetFileType (hFile=0x238) returned 0x1 [0146.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0146.783] GetFileType (hFile=0x238) returned 0x1 [0146.783] ReadFile (in: hFile=0x238, lpBuffer=0x27d2dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x27d2dd8*, lpNumberOfBytesRead=0x1adb08*=0xd, lpOverlapped=0x0) returned 1 [0146.784] ReadFile (in: hFile=0x238, lpBuffer=0x27d2dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x27d2dd8*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0146.784] CloseHandle (hObject=0x238) returned 1 [0146.784] WriteFile (in: hFile=0x23c, lpBuffer=0x27d1318*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x27d1318*, lpNumberOfBytesWritten=0x1ad9d8*=0x30, lpOverlapped=0x0) returned 1 [0146.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x1ad600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0146.785] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml")) returned 1 [0146.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\ENYBENY.TXT", lpFilePart=0x0) returned 0x65 [0146.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0146.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0146.787] GetFileType (hFile=0x23c) returned 0x1 [0146.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0146.787] GetFileType (hFile=0x23c) returned 0x1 [0146.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\ENYBENY.png", lpFilePart=0x0) returned 0x65 [0146.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0146.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0146.788] GetFileType (hFile=0x23c) returned 0x1 [0146.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0146.788] GetFileType (hFile=0x23c) returned 0x1 [0146.788] WriteFile (in: hFile=0x23c, lpBuffer=0x27de4e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x27de4e0*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0146.789] CloseHandle (hObject=0x23c) returned 1 [0146.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x90 [0146.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0146.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0146.978] GetFileType (hFile=0x23c) returned 0x1 [0146.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0146.978] GetFileType (hFile=0x23c) returned 0x1 [0146.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0146.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", lpFilePart=0x0) returned 0x59 [0146.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", lpFilePart=0x0) returned 0x5a [0146.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0146.980] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.980] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0146.980] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0146.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0146.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", lpFilePart=0x0) returned 0x59 [0146.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", lpFilePart=0x0) returned 0x5a [0146.981] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0146.981] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.981] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0146.981] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0146.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x65 [0146.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0146.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0146.985] GetFileType (hFile=0x23c) returned 0x1 [0146.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0146.985] GetFileType (hFile=0x23c) returned 0x1 [0146.986] WriteFile (in: hFile=0x23c, lpBuffer=0x27f1b78*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x27f1b78*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0146.987] CloseHandle (hObject=0x23c) returned 1 [0146.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\ENYBENY.png", lpFilePart=0x0) returned 0x65 [0146.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0146.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0146.988] GetFileType (hFile=0x23c) returned 0x1 [0146.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0146.988] GetFileType (hFile=0x23c) returned 0x1 [0146.988] WriteFile (in: hFile=0x23c, lpBuffer=0x27f2c78*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x27f2c78*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0146.989] CloseHandle (hObject=0x23c) returned 1 [0146.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x90 [0146.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0146.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0146.994] GetFileType (hFile=0x23c) returned 0x1 [0146.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0146.994] GetFileType (hFile=0x23c) returned 0x1 [0146.994] WriteFile (in: hFile=0x23c, lpBuffer=0x25f8cc0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x25f8cc0*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0146.995] CloseHandle (hObject=0x23c) returned 1 [0146.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0146.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", lpFilePart=0x0) returned 0x59 [0146.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", lpFilePart=0x0) returned 0x5a [0146.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0146.995] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.996] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0146.996] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0146.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0146.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0146.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", lpFilePart=0x0) returned 0x59 [0146.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", lpFilePart=0x0) returned 0x5a [0146.996] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0146.996] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0146.997] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0146.997] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0146.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0146.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\ENYBENY.TXT", lpFilePart=0x0) returned 0x65 [0147.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.001] GetFileType (hFile=0x23c) returned 0x1 [0147.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.001] GetFileType (hFile=0x23c) returned 0x1 [0147.001] WriteFile (in: hFile=0x23c, lpBuffer=0x2605638*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2605638*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0147.002] CloseHandle (hObject=0x23c) returned 1 [0147.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\ENYBENY.png", lpFilePart=0x0) returned 0x65 [0147.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0147.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.003] GetFileType (hFile=0x23c) returned 0x1 [0147.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0147.003] GetFileType (hFile=0x23c) returned 0x1 [0147.004] WriteFile (in: hFile=0x23c, lpBuffer=0x2606738*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2606738*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0147.005] CloseHandle (hObject=0x23c) returned 1 [0147.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x90 [0147.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.006] GetFileType (hFile=0x23c) returned 0x1 [0147.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.006] GetFileType (hFile=0x23c) returned 0x1 [0147.006] WriteFile (in: hFile=0x23c, lpBuffer=0x260d458*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x260d458*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0147.007] CloseHandle (hObject=0x23c) returned 1 [0147.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5c [0147.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.010] GetFileType (hFile=0x23c) returned 0x1 [0147.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.011] GetFileType (hFile=0x23c) returned 0x1 [0147.011] WriteFile (in: hFile=0x23c, lpBuffer=0x26178e0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26178e0*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0147.012] CloseHandle (hObject=0x23c) returned 1 [0147.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.png", lpFilePart=0x0) returned 0x5c [0147.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.015] GetFileType (hFile=0x23c) returned 0x1 [0147.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0147.015] GetFileType (hFile=0x23c) returned 0x1 [0147.015] WriteFile (in: hFile=0x23c, lpBuffer=0x26189d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26189d0*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0147.016] CloseHandle (hObject=0x23c) returned 1 [0147.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x87 [0147.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.017] GetFileType (hFile=0x23c) returned 0x1 [0147.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.017] GetFileType (hFile=0x23c) returned 0x1 [0147.017] WriteFile (in: hFile=0x23c, lpBuffer=0x261f6b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x261f6b0*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0147.032] CloseHandle (hObject=0x23c) returned 1 [0147.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x50 [0147.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", lpFilePart=0x0) returned 0x51 [0147.032] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.033] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.033] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.033] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.033] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.033] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x50 [0147.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", lpFilePart=0x0) returned 0x51 [0147.034] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.034] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.034] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.034] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.034] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.034] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x57 [0147.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", lpFilePart=0x0) returned 0x58 [0147.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.035] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.035] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.035] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x57 [0147.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", lpFilePart=0x0) returned 0x58 [0147.036] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.036] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\ENYBENY.TXT", lpFilePart=0x0) returned 0x63 [0147.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.037] GetFileType (hFile=0x23c) returned 0x1 [0147.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.037] GetFileType (hFile=0x23c) returned 0x1 [0147.038] WriteFile (in: hFile=0x23c, lpBuffer=0x262ec20*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x262ec20*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0147.039] CloseHandle (hObject=0x23c) returned 1 [0147.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\ENYBENY.png", lpFilePart=0x0) returned 0x63 [0147.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0147.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.040] GetFileType (hFile=0x23c) returned 0x1 [0147.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0147.040] GetFileType (hFile=0x23c) returned 0x1 [0147.040] WriteFile (in: hFile=0x23c, lpBuffer=0x262fd18*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x262fd18*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0147.041] CloseHandle (hObject=0x23c) returned 1 [0147.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8e [0147.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.042] GetFileType (hFile=0x23c) returned 0x1 [0147.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.042] GetFileType (hFile=0x23c) returned 0x1 [0147.042] WriteFile (in: hFile=0x23c, lpBuffer=0x2636a20*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2636a20*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0147.043] CloseHandle (hObject=0x23c) returned 1 [0147.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x5c [0147.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", lpFilePart=0x0) returned 0x5d [0147.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.046] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.046] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.047] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.047] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.047] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.047] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.047] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x5c [0147.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", lpFilePart=0x0) returned 0x5d [0147.048] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.049] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.049] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.049] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.050] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.050] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.050] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.050] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0147.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.053] GetFileType (hFile=0x23c) returned 0x1 [0147.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.053] GetFileType (hFile=0x23c) returned 0x1 [0147.053] WriteFile (in: hFile=0x23c, lpBuffer=0x2645178*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2645178*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0147.054] CloseHandle (hObject=0x23c) returned 1 [0147.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0147.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0147.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.055] GetFileType (hFile=0x23c) returned 0x1 [0147.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0147.055] GetFileType (hFile=0x23c) returned 0x1 [0147.055] WriteFile (in: hFile=0x23c, lpBuffer=0x2646280*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2646280*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0147.057] CloseHandle (hObject=0x23c) returned 1 [0147.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0147.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.058] GetFileType (hFile=0x23c) returned 0x1 [0147.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.058] GetFileType (hFile=0x23c) returned 0x1 [0147.058] WriteFile (in: hFile=0x23c, lpBuffer=0x264cfa8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x264cfa8*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0147.059] CloseHandle (hObject=0x23c) returned 1 [0147.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5c [0147.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.060] GetFileType (hFile=0x23c) returned 0x1 [0147.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.060] GetFileType (hFile=0x23c) returned 0x1 [0147.061] WriteFile (in: hFile=0x23c, lpBuffer=0x2657430*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2657430*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0147.062] CloseHandle (hObject=0x23c) returned 1 [0147.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\ENYBENY.png", lpFilePart=0x0) returned 0x5c [0147.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.063] GetFileType (hFile=0x23c) returned 0x1 [0147.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0147.063] GetFileType (hFile=0x23c) returned 0x1 [0147.063] WriteFile (in: hFile=0x23c, lpBuffer=0x2658520*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2658520*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0147.065] CloseHandle (hObject=0x23c) returned 1 [0147.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x87 [0147.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.145] GetFileType (hFile=0x23c) returned 0x1 [0147.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.145] GetFileType (hFile=0x23c) returned 0x1 [0147.145] WriteFile (in: hFile=0x23c, lpBuffer=0x265f200*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x265f200*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0147.146] CloseHandle (hObject=0x23c) returned 1 [0147.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\ENYBENY.TXT", lpFilePart=0x0) returned 0x53 [0147.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0147.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.147] GetFileType (hFile=0x23c) returned 0x1 [0147.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0147.147] GetFileType (hFile=0x23c) returned 0x1 [0147.148] WriteFile (in: hFile=0x23c, lpBuffer=0x2669658*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2669658*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0147.149] CloseHandle (hObject=0x23c) returned 1 [0147.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\ENYBENY.png", lpFilePart=0x0) returned 0x53 [0147.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.150] GetFileType (hFile=0x23c) returned 0x1 [0147.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0147.150] GetFileType (hFile=0x23c) returned 0x1 [0147.150] WriteFile (in: hFile=0x23c, lpBuffer=0x266a730*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x266a730*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0147.152] CloseHandle (hObject=0x23c) returned 1 [0147.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7e [0147.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0147.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.153] GetFileType (hFile=0x23c) returned 0x1 [0147.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0147.153] GetFileType (hFile=0x23c) returned 0x1 [0147.153] WriteFile (in: hFile=0x23c, lpBuffer=0x26713d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26713d8*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0147.154] CloseHandle (hObject=0x23c) returned 1 [0147.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0147.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x42 [0147.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x43 [0147.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0147.159] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.159] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.159] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.160] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.160] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.160] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0147.160] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0147.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0147.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0147.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x42 [0147.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x43 [0147.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0147.162] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.162] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.162] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.163] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.163] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.163] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0147.163] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0147.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0147.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x51 [0147.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x52 [0147.164] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.165] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.165] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.166] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.166] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x51 [0147.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x52 [0147.166] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.166] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.166] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.167] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.167] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x57 [0147.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x58 [0147.167] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.168] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.169] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.169] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x57 [0147.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x58 [0147.169] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.169] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.170] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.170] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.170] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.170] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", lpFilePart=0x0) returned 0x60 [0147.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", lpFilePart=0x0) returned 0x61 [0147.171] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0147.254] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.256] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.256] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.256] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0147.256] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0147.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0147.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", lpFilePart=0x0) returned 0x60 [0147.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", lpFilePart=0x0) returned 0x61 [0147.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0147.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0147.259] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0147.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0147.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0147.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0147.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0147.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0147.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0147.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0147.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0147.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0147.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0147.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x60 [0147.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x61 [0147.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0147.419] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.419] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.419] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.419] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.419] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.419] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.420] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.420] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.420] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.420] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.420] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.420] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.420] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.420] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0147.421] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0147.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0147.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x60 [0147.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x61 [0147.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0147.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0147.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0147.424] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0147.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0147.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0147.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0147.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0147.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0147.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0147.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0147.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0147.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0147.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0147.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x63 [0147.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\ENYBENY.png", lpFilePart=0x0) returned 0x63 [0147.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0147.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0147.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8e [0147.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5d [0147.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\ENYBENY.png", lpFilePart=0x0) returned 0x5d [0147.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0147.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x88 [0147.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x59 [0147.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", lpFilePart=0x0) returned 0x5a [0147.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.570] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.570] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.570] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x59 [0147.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", lpFilePart=0x0) returned 0x5a [0147.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.571] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.571] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.571] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x65 [0147.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\ENYBENY.png", lpFilePart=0x0) returned 0x65 [0147.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0147.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x90 [0147.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4e [0147.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0147.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0147.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\ENYBENY.png", lpFilePart=0x0) returned 0x4e [0147.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0147.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x79 [0147.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0147.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0147.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0147.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x3c [0147.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3d [0147.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0147.584] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.584] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.584] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.584] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.584] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0147.584] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0147.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0147.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0147.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x3c [0147.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3d [0147.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0147.585] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.585] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.585] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.585] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0147.585] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0147.585] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0147.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0147.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", lpFilePart=0x0) returned 0x41 [0147.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", lpFilePart=0x0) returned 0x42 [0147.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.587] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", lpFilePart=0x0) returned 0x41 [0147.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", lpFilePart=0x0) returned 0x42 [0147.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.588] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.588] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.588] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", lpFilePart=0x0) returned 0x51 [0147.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", lpFilePart=0x0) returned 0x52 [0147.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.589] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.589] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.589] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.589] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.589] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.589] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", lpFilePart=0x0) returned 0x51 [0147.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", lpFilePart=0x0) returned 0x52 [0147.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.590] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5d [0147.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\ENYBENY.png", lpFilePart=0x0) returned 0x5d [0147.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0147.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0147.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x88 [0147.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4d [0147.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\ENYBENY.png", lpFilePart=0x0) returned 0x4d [0147.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0147.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x78 [0147.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", lpFilePart=0x0) returned 0x43 [0147.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", lpFilePart=0x0) returned 0x44 [0147.963] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.963] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.963] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.963] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.963] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.963] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0147.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", lpFilePart=0x0) returned 0x43 [0147.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", lpFilePart=0x0) returned 0x44 [0147.964] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0147.964] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.964] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.964] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0147.964] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0147.964] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0147.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0147.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", lpFilePart=0x0) returned 0x4a [0147.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", lpFilePart=0x0) returned 0x4b [0147.964] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.965] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.965] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.965] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", lpFilePart=0x0) returned 0x4a [0147.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", lpFilePart=0x0) returned 0x4b [0147.965] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.965] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.965] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.965] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\ENYBENY.TXT", lpFilePart=0x0) returned 0x56 [0147.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\ENYBENY.png", lpFilePart=0x0) returned 0x56 [0147.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0147.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0147.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x81 [0147.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", lpFilePart=0x0) returned 0x48 [0147.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", lpFilePart=0x0) returned 0x49 [0147.972] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.972] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.972] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.972] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0147.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", lpFilePart=0x0) returned 0x48 [0147.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", lpFilePart=0x0) returned 0x49 [0147.973] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0147.973] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0147.973] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0147.973] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0147.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0147.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0147.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\ENYBENY.TXT", lpFilePart=0x0) returned 0x54 [0147.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\ENYBENY.png", lpFilePart=0x0) returned 0x54 [0147.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0147.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0147.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7f [0147.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0147.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0147.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4f [0147.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0147.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0147.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\ENYBENY.png", lpFilePart=0x0) returned 0x4f [0147.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0147.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0147.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0147.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7a [0147.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0147.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0148.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0148.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", lpFilePart=0x0) returned 0x47 [0148.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", lpFilePart=0x0) returned 0x48 [0148.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0148.127] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.127] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.127] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.127] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0148.128] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0148.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0148.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0148.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0148.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", lpFilePart=0x0) returned 0x47 [0148.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", lpFilePart=0x0) returned 0x48 [0148.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0148.128] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.128] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.128] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.128] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0148.128] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0148.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0148.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0148.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.EnyBenied", lpFilePart=0x0) returned 0x76 [0148.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0148.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0148.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0148.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0148.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0148.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0148.641] GetFileType (hFile=0x238) returned 0x1 [0148.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0148.641] GetFileType (hFile=0x238) returned 0x1 [0148.641] ReadFile (in: hFile=0x238, lpBuffer=0x26abce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x26abce0*, lpNumberOfBytesRead=0x1adb88*=0x7ef, lpOverlapped=0x0) returned 1 [0148.777] ReadFile (in: hFile=0x238, lpBuffer=0x26abcb7, nNumberOfBytesToRead=0x11, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x26abcb7*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0148.784] ReadFile (in: hFile=0x238, lpBuffer=0x26abce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x26abce0*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0148.784] CloseHandle (hObject=0x238) returned 1 [0148.785] WriteFile (in: hFile=0x23c, lpBuffer=0x26aa1f0*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x26aa1f0*, lpNumberOfBytesWritten=0x1ada58*=0x810, lpOverlapped=0x0) returned 1 [0148.785] CloseHandle (hObject=0x23c) returned 1 [0148.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0148.786] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml")) returned 1 [0148.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\ENYBENY.TXT", lpFilePart=0x0) returned 0x53 [0148.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0148.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.789] GetFileType (hFile=0x23c) returned 0x1 [0148.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0148.789] GetFileType (hFile=0x23c) returned 0x1 [0148.790] WriteFile (in: hFile=0x23c, lpBuffer=0x26b6ab0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26b6ab0*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0148.791] CloseHandle (hObject=0x23c) returned 1 [0148.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\ENYBENY.png", lpFilePart=0x0) returned 0x53 [0148.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0148.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0148.791] GetFileType (hFile=0x23c) returned 0x1 [0148.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0148.791] GetFileType (hFile=0x23c) returned 0x1 [0148.791] WriteFile (in: hFile=0x23c, lpBuffer=0x26b7b88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26b7b88*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0148.793] CloseHandle (hObject=0x23c) returned 1 [0148.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7e [0148.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0148.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.793] GetFileType (hFile=0x23c) returned 0x1 [0148.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0148.793] GetFileType (hFile=0x23c) returned 0x1 [0148.794] WriteFile (in: hFile=0x23c, lpBuffer=0x26be830*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26be830*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0148.794] CloseHandle (hObject=0x23c) returned 1 [0148.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ENYBENY.TXT", lpFilePart=0x0) returned 0x48 [0148.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0148.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.797] GetFileType (hFile=0x23c) returned 0x1 [0148.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0148.798] GetFileType (hFile=0x23c) returned 0x1 [0148.798] WriteFile (in: hFile=0x23c, lpBuffer=0x26c8c68*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26c8c68*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0148.799] CloseHandle (hObject=0x23c) returned 1 [0148.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ENYBENY.png", lpFilePart=0x0) returned 0x48 [0148.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0148.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0148.800] GetFileType (hFile=0x23c) returned 0x1 [0148.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0148.800] GetFileType (hFile=0x23c) returned 0x1 [0148.800] WriteFile (in: hFile=0x23c, lpBuffer=0x26c9d30*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26c9d30*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0148.801] CloseHandle (hObject=0x23c) returned 1 [0148.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x73 [0148.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0148.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.803] GetFileType (hFile=0x23c) returned 0x1 [0148.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0148.803] GetFileType (hFile=0x23c) returned 0x1 [0148.803] WriteFile (in: hFile=0x23c, lpBuffer=0x26d0998*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26d0998*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0148.804] CloseHandle (hObject=0x23c) returned 1 [0148.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0148.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3d [0148.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x3e [0148.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0148.805] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0148.805] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0148.805] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0148.805] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0148.805] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0148.805] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0148.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0148.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0148.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0148.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3d [0148.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x3e [0148.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0148.806] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0148.806] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0148.806] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0148.806] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0148.806] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0148.806] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0148.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0148.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0148.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0148.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", lpFilePart=0x0) returned 0x47 [0148.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", lpFilePart=0x0) returned 0x48 [0148.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0148.807] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.807] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.807] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0148.807] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0148.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0148.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0148.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0148.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", lpFilePart=0x0) returned 0x47 [0148.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", lpFilePart=0x0) returned 0x48 [0148.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0148.808] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.808] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0148.808] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0148.808] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0148.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0148.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0148.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x53 [0148.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0148.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.809] GetFileType (hFile=0x23c) returned 0x1 [0148.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0148.810] GetFileType (hFile=0x23c) returned 0x1 [0148.810] WriteFile (in: hFile=0x23c, lpBuffer=0x26e0378*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26e0378*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0148.811] CloseHandle (hObject=0x23c) returned 1 [0148.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\ENYBENY.png", lpFilePart=0x0) returned 0x53 [0148.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0148.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0148.812] GetFileType (hFile=0x23c) returned 0x1 [0148.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0148.812] GetFileType (hFile=0x23c) returned 0x1 [0148.812] WriteFile (in: hFile=0x23c, lpBuffer=0x26e1450*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26e1450*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0148.813] CloseHandle (hObject=0x23c) returned 1 [0148.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7e [0148.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0148.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.815] GetFileType (hFile=0x23c) returned 0x1 [0148.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0148.815] GetFileType (hFile=0x23c) returned 0x1 [0148.815] WriteFile (in: hFile=0x23c, lpBuffer=0x26e80f8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26e80f8*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0148.816] CloseHandle (hObject=0x23c) returned 1 [0148.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\ENYBENY.TXT", lpFilePart=0x0) returned 0x49 [0148.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0148.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.817] GetFileType (hFile=0x23c) returned 0x1 [0148.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0148.817] GetFileType (hFile=0x23c) returned 0x1 [0148.817] WriteFile (in: hFile=0x23c, lpBuffer=0x26f2530*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26f2530*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0148.818] CloseHandle (hObject=0x23c) returned 1 [0148.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\ENYBENY.png", lpFilePart=0x0) returned 0x49 [0148.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0148.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0148.869] GetFileType (hFile=0x23c) returned 0x1 [0148.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0148.869] GetFileType (hFile=0x23c) returned 0x1 [0148.869] WriteFile (in: hFile=0x23c, lpBuffer=0x26f35f8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26f35f8*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0148.870] CloseHandle (hObject=0x23c) returned 1 [0148.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x74 [0148.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0148.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0148.871] GetFileType (hFile=0x23c) returned 0x1 [0148.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0148.871] GetFileType (hFile=0x23c) returned 0x1 [0148.872] WriteFile (in: hFile=0x23c, lpBuffer=0x26fa270*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26fa270*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0148.873] CloseHandle (hObject=0x23c) returned 1 [0148.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0148.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x3f [0148.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x40 [0148.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0149.004] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.004] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0149.004] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0149.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0149.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0149.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x3f [0149.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x40 [0149.005] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0149.005] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.005] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0149.005] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0149.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0149.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0149.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0149.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.047] GetFileType (hFile=0x23c) returned 0x1 [0149.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0149.047] GetFileType (hFile=0x23c) returned 0x1 [0149.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0149.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0149.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.049] GetFileType (hFile=0x23c) returned 0x1 [0149.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0149.049] GetFileType (hFile=0x23c) returned 0x1 [0149.049] WriteFile (in: hFile=0x23c, lpBuffer=0x2707720*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2707720*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0149.051] CloseHandle (hObject=0x23c) returned 1 [0149.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0149.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0149.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.052] GetFileType (hFile=0x23c) returned 0x1 [0149.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0149.052] GetFileType (hFile=0x23c) returned 0x1 [0149.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0149.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", lpFilePart=0x0) returned 0x49 [0149.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", lpFilePart=0x0) returned 0x4a [0149.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0149.054] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.054] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0149.054] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0149.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0149.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0149.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", lpFilePart=0x0) returned 0x49 [0149.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", lpFilePart=0x0) returned 0x4a [0149.055] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0149.055] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.055] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0149.055] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0149.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0149.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\ENYBENY.TXT", lpFilePart=0x0) returned 0x55 [0149.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0149.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.056] GetFileType (hFile=0x23c) returned 0x1 [0149.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0149.056] GetFileType (hFile=0x23c) returned 0x1 [0149.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\ENYBENY.png", lpFilePart=0x0) returned 0x55 [0149.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0149.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.058] GetFileType (hFile=0x23c) returned 0x1 [0149.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0149.058] GetFileType (hFile=0x23c) returned 0x1 [0149.059] WriteFile (in: hFile=0x23c, lpBuffer=0x271ba70*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x271ba70*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0149.060] CloseHandle (hObject=0x23c) returned 1 [0149.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x80 [0149.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0149.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.061] GetFileType (hFile=0x23c) returned 0x1 [0149.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0149.061] GetFileType (hFile=0x23c) returned 0x1 [0149.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0149.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", lpFilePart=0x0) returned 0x3b [0149.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", lpFilePart=0x0) returned 0x3c [0149.063] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0149.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0149.064] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0149.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0149.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0149.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", lpFilePart=0x0) returned 0x3b [0149.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", lpFilePart=0x0) returned 0x3c [0149.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0149.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.065] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.065] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.065] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0149.065] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0149.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0149.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\ENYBENY.TXT", lpFilePart=0x0) returned 0x47 [0149.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0149.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.066] GetFileType (hFile=0x23c) returned 0x1 [0149.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0149.066] GetFileType (hFile=0x23c) returned 0x1 [0149.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\ENYBENY.png", lpFilePart=0x0) returned 0x47 [0149.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0149.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.068] GetFileType (hFile=0x23c) returned 0x1 [0149.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0149.068] GetFileType (hFile=0x23c) returned 0x1 [0149.068] WriteFile (in: hFile=0x23c, lpBuffer=0x2730360*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2730360*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0149.070] CloseHandle (hObject=0x23c) returned 1 [0149.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x72 [0149.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0149.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.104] GetFileType (hFile=0x23c) returned 0x1 [0149.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0149.104] GetFileType (hFile=0x23c) returned 0x1 [0149.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\ENYBENY.TXT", lpFilePart=0x0) returned 0x41 [0149.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0149.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.106] GetFileType (hFile=0x23c) returned 0x1 [0149.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0149.106] GetFileType (hFile=0x23c) returned 0x1 [0149.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\ENYBENY.png", lpFilePart=0x0) returned 0x41 [0149.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0149.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.108] GetFileType (hFile=0x23c) returned 0x1 [0149.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0149.108] GetFileType (hFile=0x23c) returned 0x1 [0149.108] WriteFile (in: hFile=0x23c, lpBuffer=0x2742490*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x2742490*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0149.109] CloseHandle (hObject=0x23c) returned 1 [0149.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6c [0149.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0149.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.110] GetFileType (hFile=0x23c) returned 0x1 [0149.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0149.110] GetFileType (hFile=0x23c) returned 0x1 [0149.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0149.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0149.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", lpFilePart=0x0) returned 0x3b [0149.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0149.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0149.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0149.112] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0149.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0149.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0149.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0149.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", lpFilePart=0x0) returned 0x3b [0149.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0149.112] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0149.113] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0149.113] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0149.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0149.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\ENYBENY.TXT", lpFilePart=0x0) returned 0x46 [0149.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0149.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0149.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\ENYBENY.png", lpFilePart=0x0) returned 0x46 [0149.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0149.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0149.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x71 [0149.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0149.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0149.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0149.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0149.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", lpFilePart=0x0) returned 0x34 [0149.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0149.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0149.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0149.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0149.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0149.118] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0149.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0149.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0149.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0149.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", lpFilePart=0x0) returned 0x34 [0149.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0149.119] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0149.119] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0149.119] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0149.119] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0149.119] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0149.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0149.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0149.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0149.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3c [0149.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0149.127] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.127] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.127] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0149.127] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0149.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0149.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0149.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0149.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3c [0149.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0149.127] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.128] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0149.128] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0149.128] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0149.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0149.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0149.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0149.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x45 [0149.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0149.128] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0149.128] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0149.129] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0149.129] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0149.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0149.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0149.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0149.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x45 [0149.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0149.129] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0149.129] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0149.129] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0149.129] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0149.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0149.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0149.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0149.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x56 [0149.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0149.352] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.354] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0149.354] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0149.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0149.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0149.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0149.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x56 [0149.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0149.356] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.356] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.356] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.356] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.356] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.357] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.357] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0149.357] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0149.357] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0149.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0149.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0149.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0149.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", lpFilePart=0x0) returned 0x5c [0149.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0149.727] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.728] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.728] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.728] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.728] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.728] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.728] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.728] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.728] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.730] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.730] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.730] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.730] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.730] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0149.730] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0149.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0149.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0149.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0149.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", lpFilePart=0x0) returned 0x5c [0149.731] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0149.733] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0149.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0149.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0149.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", lpFilePart=0x0) returned 0x5e [0149.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.735] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.735] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.735] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.735] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.735] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0149.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", lpFilePart=0x0) returned 0x5e [0149.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.736] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.736] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.736] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.736] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.736] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0149.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", lpFilePart=0x0) returned 0x61 [0149.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.737] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.737] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.737] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.737] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0149.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", lpFilePart=0x0) returned 0x61 [0149.737] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.737] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.737] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.738] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.738] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0149.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", lpFilePart=0x0) returned 0x61 [0149.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.743] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.743] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.743] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.743] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0149.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", lpFilePart=0x0) returned 0x61 [0149.744] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.744] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.744] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.744] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.744] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0149.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", lpFilePart=0x0) returned 0x5e [0149.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.755] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.755] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.755] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.755] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.755] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.755] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0149.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", lpFilePart=0x0) returned 0x5e [0149.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.756] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0149.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", lpFilePart=0x0) returned 0x61 [0149.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.756] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0149.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", lpFilePart=0x0) returned 0x61 [0149.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.757] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.757] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.757] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.757] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0149.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", lpFilePart=0x0) returned 0x61 [0149.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.763] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0149.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", lpFilePart=0x0) returned 0x61 [0149.763] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.763] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0149.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", lpFilePart=0x0) returned 0x61 [0149.768] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.769] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0149.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", lpFilePart=0x0) returned 0x61 [0149.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.769] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.778] WriteFile (in: hFile=0x23c, lpBuffer=0x25fe6f8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x25fe6f8*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0149.779] CloseHandle (hObject=0x23c) returned 1 [0149.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.780] GetFileType (hFile=0x23c) returned 0x1 [0149.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.780] GetFileType (hFile=0x23c) returned 0x1 [0149.780] WriteFile (in: hFile=0x23c, lpBuffer=0x25ff800*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x25ff800*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0149.781] CloseHandle (hObject=0x23c) returned 1 [0149.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.867] GetFileType (hFile=0x23c) returned 0x1 [0149.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.868] GetFileType (hFile=0x23c) returned 0x1 [0149.868] WriteFile (in: hFile=0x23c, lpBuffer=0x2606538*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2606538*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0149.868] CloseHandle (hObject=0x23c) returned 1 [0149.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0149.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", lpFilePart=0x0) returned 0x5e [0149.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.870] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0149.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", lpFilePart=0x0) returned 0x5e [0149.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.871] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.874] GetFileType (hFile=0x23c) returned 0x1 [0149.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.874] GetFileType (hFile=0x23c) returned 0x1 [0149.874] WriteFile (in: hFile=0x23c, lpBuffer=0x2612f90*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2612f90*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0149.875] CloseHandle (hObject=0x23c) returned 1 [0149.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.876] GetFileType (hFile=0x23c) returned 0x1 [0149.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.876] GetFileType (hFile=0x23c) returned 0x1 [0149.876] WriteFile (in: hFile=0x23c, lpBuffer=0x2614098*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x2614098*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0149.877] CloseHandle (hObject=0x23c) returned 1 [0149.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.878] GetFileType (hFile=0x23c) returned 0x1 [0149.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.878] GetFileType (hFile=0x23c) returned 0x1 [0149.878] WriteFile (in: hFile=0x23c, lpBuffer=0x261add0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x261add0*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0149.879] CloseHandle (hObject=0x23c) returned 1 [0149.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0149.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", lpFilePart=0x0) returned 0x5e [0149.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.880] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.880] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.880] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.880] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0149.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", lpFilePart=0x0) returned 0x5e [0149.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.881] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.881] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.881] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.881] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0149.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", lpFilePart=0x0) returned 0x61 [0149.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.882] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.882] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.882] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.883] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0149.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", lpFilePart=0x0) returned 0x61 [0149.883] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.883] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.883] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.883] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.884] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.887] GetFileType (hFile=0x23c) returned 0x1 [0149.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.887] GetFileType (hFile=0x23c) returned 0x1 [0149.887] WriteFile (in: hFile=0x23c, lpBuffer=0x262a7f8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad898, lpOverlapped=0x0 | out: lpBuffer=0x262a7f8*, lpNumberOfBytesWritten=0x1ad898*=0x394, lpOverlapped=0x0) returned 1 [0149.888] CloseHandle (hObject=0x23c) returned 1 [0149.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.889] GetFileType (hFile=0x23c) returned 0x1 [0149.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.889] GetFileType (hFile=0x23c) returned 0x1 [0149.889] WriteFile (in: hFile=0x23c, lpBuffer=0x262b908*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x262b908*, lpNumberOfBytesWritten=0x1ad9d8*=0x50df, lpOverlapped=0x0) returned 1 [0149.890] CloseHandle (hObject=0x23c) returned 1 [0149.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.891] GetFileType (hFile=0x23c) returned 0x1 [0149.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.891] GetFileType (hFile=0x23c) returned 0x1 [0149.891] WriteFile (in: hFile=0x23c, lpBuffer=0x2632648*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad898, lpOverlapped=0x0 | out: lpBuffer=0x2632648*, lpNumberOfBytesWritten=0x1ad898*=0xc6, lpOverlapped=0x0) returned 1 [0149.892] CloseHandle (hObject=0x23c) returned 1 [0149.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.893] GetFileType (hFile=0x23c) returned 0x1 [0149.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.893] GetFileType (hFile=0x23c) returned 0x1 [0149.893] WriteFile (in: hFile=0x23c, lpBuffer=0x263cb00*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x263cb00*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0149.894] CloseHandle (hObject=0x23c) returned 1 [0149.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.895] GetFileType (hFile=0x23c) returned 0x1 [0149.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.895] GetFileType (hFile=0x23c) returned 0x1 [0149.895] WriteFile (in: hFile=0x23c, lpBuffer=0x263dc08*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x263dc08*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0149.896] CloseHandle (hObject=0x23c) returned 1 [0149.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.897] GetFileType (hFile=0x23c) returned 0x1 [0149.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.897] GetFileType (hFile=0x23c) returned 0x1 [0149.898] WriteFile (in: hFile=0x23c, lpBuffer=0x2644940*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2644940*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0149.898] CloseHandle (hObject=0x23c) returned 1 [0149.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0149.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", lpFilePart=0x0) returned 0x5e [0149.899] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.899] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.899] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.899] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0149.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", lpFilePart=0x0) returned 0x5e [0149.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.900] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.900] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.900] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.901] GetFileType (hFile=0x23c) returned 0x1 [0149.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.901] GetFileType (hFile=0x23c) returned 0x1 [0149.902] WriteFile (in: hFile=0x23c, lpBuffer=0x2651398*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2651398*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0149.903] CloseHandle (hObject=0x23c) returned 1 [0149.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.904] GetFileType (hFile=0x23c) returned 0x1 [0149.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.904] GetFileType (hFile=0x23c) returned 0x1 [0149.904] WriteFile (in: hFile=0x23c, lpBuffer=0x26524a0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x26524a0*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0149.905] CloseHandle (hObject=0x23c) returned 1 [0149.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.906] GetFileType (hFile=0x23c) returned 0x1 [0149.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.906] GetFileType (hFile=0x23c) returned 0x1 [0149.906] WriteFile (in: hFile=0x23c, lpBuffer=0x26591d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x26591d8*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0149.907] CloseHandle (hObject=0x23c) returned 1 [0149.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0149.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", lpFilePart=0x0) returned 0x5e [0149.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.909] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.909] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.909] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0149.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", lpFilePart=0x0) returned 0x5e [0149.909] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.909] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.909] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.910] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.911] GetFileType (hFile=0x23c) returned 0x1 [0149.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.911] GetFileType (hFile=0x23c) returned 0x1 [0149.911] WriteFile (in: hFile=0x23c, lpBuffer=0x2665c30*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2665c30*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0149.912] CloseHandle (hObject=0x23c) returned 1 [0149.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.913] GetFileType (hFile=0x23c) returned 0x1 [0149.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.913] GetFileType (hFile=0x23c) returned 0x1 [0149.913] WriteFile (in: hFile=0x23c, lpBuffer=0x2666d38*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x2666d38*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0149.914] CloseHandle (hObject=0x23c) returned 1 [0149.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.915] GetFileType (hFile=0x23c) returned 0x1 [0149.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.915] GetFileType (hFile=0x23c) returned 0x1 [0149.915] WriteFile (in: hFile=0x23c, lpBuffer=0x266da70*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x266da70*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0149.916] CloseHandle (hObject=0x23c) returned 1 [0149.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0149.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", lpFilePart=0x0) returned 0x5e [0149.916] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.917] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.917] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.917] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0149.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", lpFilePart=0x0) returned 0x5e [0149.917] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.917] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.917] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.918] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.919] GetFileType (hFile=0x23c) returned 0x1 [0149.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.919] GetFileType (hFile=0x23c) returned 0x1 [0149.919] WriteFile (in: hFile=0x23c, lpBuffer=0x267a4c8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x267a4c8*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0149.920] CloseHandle (hObject=0x23c) returned 1 [0149.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.921] GetFileType (hFile=0x23c) returned 0x1 [0149.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.921] GetFileType (hFile=0x23c) returned 0x1 [0149.921] WriteFile (in: hFile=0x23c, lpBuffer=0x267b5d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x267b5d0*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0149.922] CloseHandle (hObject=0x23c) returned 1 [0149.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.923] GetFileType (hFile=0x23c) returned 0x1 [0149.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.923] GetFileType (hFile=0x23c) returned 0x1 [0149.924] WriteFile (in: hFile=0x23c, lpBuffer=0x2682308*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x2682308*, lpNumberOfBytesWritten=0x1ad918*=0xc6, lpOverlapped=0x0) returned 1 [0149.924] CloseHandle (hObject=0x23c) returned 1 [0149.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0149.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", lpFilePart=0x0) returned 0x5e [0149.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.926] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.926] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.926] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0149.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", lpFilePart=0x0) returned 0x5e [0149.926] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.926] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.926] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.927] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.928] GetFileType (hFile=0x23c) returned 0x1 [0149.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.928] GetFileType (hFile=0x23c) returned 0x1 [0149.928] WriteFile (in: hFile=0x23c, lpBuffer=0x268ed60*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad918, lpOverlapped=0x0 | out: lpBuffer=0x268ed60*, lpNumberOfBytesWritten=0x1ad918*=0x394, lpOverlapped=0x0) returned 1 [0149.929] CloseHandle (hObject=0x23c) returned 1 [0149.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.930] GetFileType (hFile=0x23c) returned 0x1 [0149.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.930] GetFileType (hFile=0x23c) returned 0x1 [0149.930] WriteFile (in: hFile=0x23c, lpBuffer=0x268fe68*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x268fe68*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0149.931] CloseHandle (hObject=0x23c) returned 1 [0149.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0149.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", lpFilePart=0x0) returned 0x5e [0149.935] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.936] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.936] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.936] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0149.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", lpFilePart=0x0) returned 0x5e [0149.936] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.936] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.936] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.937] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0149.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", lpFilePart=0x0) returned 0x5e [0149.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.943] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.943] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.944] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.944] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.944] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.944] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.944] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0149.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0149.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", lpFilePart=0x0) returned 0x5e [0149.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0149.945] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.945] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.945] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.945] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.945] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0149.945] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0149.945] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0149.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0149.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0149.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", lpFilePart=0x0) returned 0x61 [0149.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.946] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.946] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.946] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.946] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0149.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", lpFilePart=0x0) returned 0x61 [0149.946] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.946] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.947] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.947] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.947] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0149.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", lpFilePart=0x0) returned 0x61 [0149.953] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.953] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.953] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.953] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.953] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0149.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", lpFilePart=0x0) returned 0x61 [0149.953] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.954] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.954] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.954] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.954] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0149.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", lpFilePart=0x0) returned 0x61 [0149.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.960] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.960] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.960] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.960] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0149.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", lpFilePart=0x0) returned 0x61 [0149.961] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.961] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.961] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.961] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.961] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0149.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", lpFilePart=0x0) returned 0x61 [0149.968] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.969] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.970] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.970] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.970] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0149.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0149.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", lpFilePart=0x0) returned 0x61 [0149.970] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0149.970] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.971] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0149.971] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0149.971] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0149.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0149.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0149.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0149.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0149.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0149.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0149.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0149.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0149.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0149.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0149.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0149.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0149.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0149.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0149.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0149.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0149.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0149.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0149.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0150.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0150.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0150.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", lpFilePart=0x0) returned 0x5e [0150.084] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.085] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.085] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.085] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0150.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0150.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0150.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0150.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", lpFilePart=0x0) returned 0x5e [0150.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.085] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.085] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.086] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0150.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0150.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0150.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0150.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", lpFilePart=0x0) returned 0x5e [0150.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.093] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.093] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.093] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0150.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", lpFilePart=0x0) returned 0x5e [0150.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.094] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.094] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.094] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0150.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0150.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0150.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0150.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", lpFilePart=0x0) returned 0x5e [0150.101] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.101] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.101] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.101] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.101] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0150.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", lpFilePart=0x0) returned 0x5e [0150.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.102] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.102] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.102] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.102] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0150.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", lpFilePart=0x0) returned 0x61 [0150.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.103] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.103] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.103] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.103] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0150.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", lpFilePart=0x0) returned 0x61 [0150.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.104] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.104] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.104] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.104] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0150.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0150.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0150.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0150.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0150.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0150.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0150.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", lpFilePart=0x0) returned 0x5e [0150.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.116] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.116] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.116] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.116] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0150.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", lpFilePart=0x0) returned 0x5e [0150.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.117] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.117] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.117] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.117] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0150.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", lpFilePart=0x0) returned 0x61 [0150.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.118] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0150.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", lpFilePart=0x0) returned 0x61 [0150.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.118] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.118] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0150.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0150.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0150.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0150.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0150.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0150.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", lpFilePart=0x0) returned 0x5d [0150.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", lpFilePart=0x0) returned 0x5e [0150.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.135] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.135] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.135] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.135] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", lpFilePart=0x0) returned 0x5d [0150.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", lpFilePart=0x0) returned 0x5e [0150.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.136] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", lpFilePart=0x0) returned 0x60 [0150.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", lpFilePart=0x0) returned 0x61 [0150.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.136] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", lpFilePart=0x0) returned 0x60 [0150.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", lpFilePart=0x0) returned 0x61 [0150.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.136] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.137] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.137] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0150.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0150.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0150.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0150.142] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0150.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0150.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", lpFilePart=0x0) returned 0x5d [0150.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", lpFilePart=0x0) returned 0x5e [0150.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.149] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.149] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.149] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.149] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.149] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", lpFilePart=0x0) returned 0x5d [0150.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", lpFilePart=0x0) returned 0x5e [0150.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0150.150] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.150] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.150] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0150.150] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0150.150] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", lpFilePart=0x0) returned 0x60 [0150.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", lpFilePart=0x0) returned 0x61 [0150.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.151] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.151] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.151] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.151] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", lpFilePart=0x0) returned 0x60 [0150.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", lpFilePart=0x0) returned 0x61 [0150.151] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.151] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.151] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.152] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.152] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0150.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0150.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0150.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", lpFilePart=0x0) returned 0x60 [0150.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", lpFilePart=0x0) returned 0x61 [0150.160] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.161] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.161] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.161] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.161] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", lpFilePart=0x0) returned 0x60 [0150.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", lpFilePart=0x0) returned 0x61 [0150.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0150.161] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.161] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0150.161] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0150.162] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0150.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0150.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0150.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0150.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0150.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0150.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x67 [0150.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0150.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.182] GetFileType (hFile=0x23c) returned 0x1 [0150.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0150.182] GetFileType (hFile=0x23c) returned 0x1 [0150.182] WriteFile (in: hFile=0x23c, lpBuffer=0x2605008*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2605008*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0150.183] CloseHandle (hObject=0x23c) returned 1 [0150.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\ENYBENY.png", lpFilePart=0x0) returned 0x67 [0150.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0150.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.185] GetFileType (hFile=0x23c) returned 0x1 [0150.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0150.185] GetFileType (hFile=0x23c) returned 0x1 [0150.185] WriteFile (in: hFile=0x23c, lpBuffer=0x2606108*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2606108*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0150.186] CloseHandle (hObject=0x23c) returned 1 [0150.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x92 [0150.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0150.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.187] GetFileType (hFile=0x23c) returned 0x1 [0150.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0150.188] GetFileType (hFile=0x23c) returned 0x1 [0150.188] WriteFile (in: hFile=0x23c, lpBuffer=0x260ce28*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x260ce28*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0150.189] CloseHandle (hObject=0x23c) returned 1 [0150.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0150.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", lpFilePart=0x0) returned 0x62 [0150.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", lpFilePart=0x0) returned 0x63 [0150.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0150.190] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0150.191] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0150.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0150.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0150.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", lpFilePart=0x0) returned 0x62 [0150.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", lpFilePart=0x0) returned 0x63 [0150.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0150.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.192] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.192] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0150.192] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0150.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0150.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6e [0150.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0150.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.196] GetFileType (hFile=0x23c) returned 0x1 [0150.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0150.196] GetFileType (hFile=0x23c) returned 0x1 [0150.197] WriteFile (in: hFile=0x23c, lpBuffer=0x2619fb0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2619fb0*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0150.198] CloseHandle (hObject=0x23c) returned 1 [0150.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\ENYBENY.png", lpFilePart=0x0) returned 0x6e [0150.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0150.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.199] GetFileType (hFile=0x23c) returned 0x1 [0150.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0150.199] GetFileType (hFile=0x23c) returned 0x1 [0150.199] WriteFile (in: hFile=0x23c, lpBuffer=0x261b0c0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x261b0c0*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0150.201] CloseHandle (hObject=0x23c) returned 1 [0150.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x99 [0150.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0150.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.396] GetFileType (hFile=0x23c) returned 0x1 [0150.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0150.396] GetFileType (hFile=0x23c) returned 0x1 [0150.397] WriteFile (in: hFile=0x23c, lpBuffer=0x2621e10*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2621e10*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0150.398] CloseHandle (hObject=0x23c) returned 1 [0150.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0150.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", lpFilePart=0x0) returned 0x62 [0150.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", lpFilePart=0x0) returned 0x63 [0150.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0150.580] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.580] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.580] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.580] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.580] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.581] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.581] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.581] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0150.581] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0150.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0150.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0150.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", lpFilePart=0x0) returned 0x62 [0150.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", lpFilePart=0x0) returned 0x63 [0150.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0150.582] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0150.584] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0150.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0150.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6e [0150.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0150.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.586] GetFileType (hFile=0x23c) returned 0x1 [0150.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0150.588] GetFileType (hFile=0x23c) returned 0x1 [0150.588] WriteFile (in: hFile=0x23c, lpBuffer=0x2630fa0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2630fa0*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0150.589] CloseHandle (hObject=0x23c) returned 1 [0150.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\ENYBENY.png", lpFilePart=0x0) returned 0x6e [0150.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0150.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.590] GetFileType (hFile=0x23c) returned 0x1 [0150.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0150.590] GetFileType (hFile=0x23c) returned 0x1 [0150.590] WriteFile (in: hFile=0x23c, lpBuffer=0x26320b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26320b0*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0150.591] CloseHandle (hObject=0x23c) returned 1 [0150.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x99 [0150.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0150.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.593] GetFileType (hFile=0x23c) returned 0x1 [0150.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0150.593] GetFileType (hFile=0x23c) returned 0x1 [0150.593] WriteFile (in: hFile=0x23c, lpBuffer=0x2638e00*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2638e00*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0150.594] CloseHandle (hObject=0x23c) returned 1 [0150.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0150.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", lpFilePart=0x0) returned 0x62 [0150.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", lpFilePart=0x0) returned 0x63 [0150.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0150.595] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.595] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.595] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0150.595] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0150.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0150.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0150.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", lpFilePart=0x0) returned 0x62 [0150.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", lpFilePart=0x0) returned 0x63 [0150.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0150.595] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.596] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.596] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0150.596] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0150.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0150.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6e [0150.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0150.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.597] GetFileType (hFile=0x23c) returned 0x1 [0150.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0150.597] GetFileType (hFile=0x23c) returned 0x1 [0150.597] WriteFile (in: hFile=0x23c, lpBuffer=0x2646030*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2646030*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0150.598] CloseHandle (hObject=0x23c) returned 1 [0150.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\ENYBENY.png", lpFilePart=0x0) returned 0x6e [0150.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0150.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.599] GetFileType (hFile=0x23c) returned 0x1 [0150.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0150.599] GetFileType (hFile=0x23c) returned 0x1 [0150.599] WriteFile (in: hFile=0x23c, lpBuffer=0x2647140*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2647140*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0150.600] CloseHandle (hObject=0x23c) returned 1 [0150.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x99 [0150.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0150.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0150.672] GetFileType (hFile=0x23c) returned 0x1 [0150.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0150.672] GetFileType (hFile=0x23c) returned 0x1 [0150.672] WriteFile (in: hFile=0x23c, lpBuffer=0x264de90*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x264de90*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0150.673] CloseHandle (hObject=0x23c) returned 1 [0150.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0150.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", lpFilePart=0x0) returned 0x60 [0150.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", lpFilePart=0x0) returned 0x61 [0150.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0150.927] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.927] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.927] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.928] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.928] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0150.928] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0150.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0150.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0150.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", lpFilePart=0x0) returned 0x60 [0150.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", lpFilePart=0x0) returned 0x61 [0150.929] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0150.929] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0150.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0150.930] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0150.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0150.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0150.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.EnyBenied", lpFilePart=0x0) returned 0x8f [0150.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0150.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0150.933] GetFileType (hFile=0x23c) returned 0x1 [0150.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0150.933] GetFileType (hFile=0x23c) returned 0x1 [0151.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0151.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0151.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0151.337] GetFileType (hFile=0x238) returned 0x1 [0151.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0151.337] GetFileType (hFile=0x238) returned 0x1 [0151.337] ReadFile (in: hFile=0x238, lpBuffer=0x2784160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2784160*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0151.346] ReadFile (in: hFile=0x238, lpBuffer=0x2784160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2784160*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0151.346] ReadFile (in: hFile=0x238, lpBuffer=0x2784160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2784160*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0151.346] ReadFile (in: hFile=0x238, lpBuffer=0x2784160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2784160*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0151.347] ReadFile (in: hFile=0x238, lpBuffer=0x2784160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2784160*, lpNumberOfBytesRead=0x1ada88*=0xb0, lpOverlapped=0x0) returned 1 [0151.347] ReadFile (in: hFile=0x238, lpBuffer=0x2784160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2784160*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0151.347] CloseHandle (hObject=0x238) returned 1 [0151.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0151.347] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png")) returned 1 [0151.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.EnyBenied", lpFilePart=0x0) returned 0x8f [0151.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0151.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0151.350] GetFileType (hFile=0x23c) returned 0x1 [0151.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0151.350] GetFileType (hFile=0x23c) returned 0x1 [0151.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0151.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0151.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0151.804] GetFileType (hFile=0x238) returned 0x1 [0151.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0151.805] GetFileType (hFile=0x238) returned 0x1 [0151.805] ReadFile (in: hFile=0x238, lpBuffer=0x26cf948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26cf948*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0151.958] ReadFile (in: hFile=0x238, lpBuffer=0x26cf948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26cf948*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0152.016] ReadFile (in: hFile=0x238, lpBuffer=0x26cf948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26cf948*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0152.016] ReadFile (in: hFile=0x238, lpBuffer=0x26cf948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26cf948*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0152.017] ReadFile (in: hFile=0x238, lpBuffer=0x26cf948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26cf948*, lpNumberOfBytesRead=0x1ada88*=0xb0, lpOverlapped=0x0) returned 1 [0152.017] ReadFile (in: hFile=0x238, lpBuffer=0x26cf948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26cf948*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0152.017] CloseHandle (hObject=0x238) returned 1 [0152.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0152.017] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png")) returned 1 [0152.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.EnyBenied", lpFilePart=0x0) returned 0x8f [0152.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0152.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0152.020] GetFileType (hFile=0x23c) returned 0x1 [0152.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0152.020] GetFileType (hFile=0x23c) returned 0x1 [0152.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0152.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0152.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0152.399] GetFileType (hFile=0x238) returned 0x1 [0152.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0152.399] GetFileType (hFile=0x238) returned 0x1 [0152.399] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0152.520] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.734] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.806] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.806] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.806] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.806] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.806] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.807] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.807] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.807] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.807] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.807] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.808] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.808] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.808] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.808] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.808] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.809] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.809] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.809] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.809] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.809] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.810] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.810] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.810] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.810] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.810] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x1000, lpOverlapped=0x0) returned 1 [0153.811] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x362, lpOverlapped=0x0) returned 1 [0153.811] ReadFile (in: hFile=0x238, lpBuffer=0x261b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x261b130*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0153.811] CloseHandle (hObject=0x238) returned 1 [0153.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0153.811] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png")) returned 1 [0153.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6c [0153.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0153.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0153.815] GetFileType (hFile=0x23c) returned 0x1 [0153.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0153.815] GetFileType (hFile=0x23c) returned 0x1 [0153.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ENYBENY.png", lpFilePart=0x0) returned 0x6c [0153.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0153.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0153.817] GetFileType (hFile=0x23c) returned 0x1 [0153.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0153.817] GetFileType (hFile=0x23c) returned 0x1 [0153.817] WriteFile (in: hFile=0x23c, lpBuffer=0x26436a0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26436a0*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0153.818] CloseHandle (hObject=0x23c) returned 1 [0153.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x97 [0153.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0153.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0153.818] GetFileType (hFile=0x23c) returned 0x1 [0153.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0153.818] GetFileType (hFile=0x23c) returned 0x1 [0153.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.TXT", lpFilePart=0x0) returned 0x61 [0153.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0153.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0153.820] GetFileType (hFile=0x23c) returned 0x1 [0153.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0153.820] GetFileType (hFile=0x23c) returned 0x1 [0153.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.png", lpFilePart=0x0) returned 0x61 [0153.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0153.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0153.821] GetFileType (hFile=0x23c) returned 0x1 [0153.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0153.821] GetFileType (hFile=0x23c) returned 0x1 [0153.821] WriteFile (in: hFile=0x23c, lpBuffer=0x2655970*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2655970*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0153.823] CloseHandle (hObject=0x23c) returned 1 [0153.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8c [0153.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0153.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0153.823] GetFileType (hFile=0x23c) returned 0x1 [0153.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0153.823] GetFileType (hFile=0x23c) returned 0x1 [0153.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\ENYBENY.TXT", lpFilePart=0x0) returned 0x50 [0153.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0153.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0153.825] GetFileType (hFile=0x23c) returned 0x1 [0153.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0153.825] GetFileType (hFile=0x23c) returned 0x1 [0153.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\ENYBENY.png", lpFilePart=0x0) returned 0x50 [0153.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0153.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0153.826] GetFileType (hFile=0x23c) returned 0x1 [0153.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0153.826] GetFileType (hFile=0x23c) returned 0x1 [0153.826] WriteFile (in: hFile=0x23c, lpBuffer=0x2667ba8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2667ba8*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0153.827] CloseHandle (hObject=0x23c) returned 1 [0153.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7b [0153.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0153.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0153.924] GetFileType (hFile=0x23c) returned 0x1 [0153.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0153.924] GetFileType (hFile=0x23c) returned 0x1 [0153.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\ENYBENY.TXT", lpFilePart=0x0) returned 0x47 [0153.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0153.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0153.925] GetFileType (hFile=0x23c) returned 0x1 [0153.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0153.925] GetFileType (hFile=0x23c) returned 0x1 [0153.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\ENYBENY.png", lpFilePart=0x0) returned 0x47 [0153.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0153.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0153.927] GetFileType (hFile=0x23c) returned 0x1 [0153.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0153.927] GetFileType (hFile=0x23c) returned 0x1 [0153.927] WriteFile (in: hFile=0x23c, lpBuffer=0x2679d28*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2679d28*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0153.928] CloseHandle (hObject=0x23c) returned 1 [0153.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x72 [0153.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0153.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0153.929] GetFileType (hFile=0x23c) returned 0x1 [0153.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0153.929] GetFileType (hFile=0x23c) returned 0x1 [0153.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0153.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x3b [0153.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", lpFilePart=0x0) returned 0x3c [0153.930] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0153.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0153.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0153.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0153.930] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0153.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0153.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0153.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0153.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x3b [0153.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", lpFilePart=0x0) returned 0x3c [0153.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0153.931] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0153.931] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0153.931] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0153.931] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0153.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0153.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0153.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0153.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", lpFilePart=0x0) returned 0x4c [0153.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", lpFilePart=0x0) returned 0x4d [0153.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0154.001] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0154.001] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0154.002] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0154.002] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0154.002] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0154.002] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0154.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0154.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0154.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0154.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", lpFilePart=0x0) returned 0x4c [0154.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", lpFilePart=0x0) returned 0x4d [0154.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0154.004] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0154.004] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0154.004] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0154.004] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0154.004] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0154.004] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0154.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0154.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0154.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.EnyBenied", lpFilePart=0x0) returned 0x68 [0154.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0154.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0154.007] GetFileType (hFile=0x23c) returned 0x1 [0154.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0154.007] GetFileType (hFile=0x23c) returned 0x1 [0154.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0154.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0154.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0154.429] GetFileType (hFile=0x238) returned 0x1 [0154.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0154.429] GetFileType (hFile=0x238) returned 0x1 [0154.429] ReadFile (in: hFile=0x238, lpBuffer=0x27cd958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27cd958*, lpNumberOfBytesRead=0x1adb88*=0x464, lpOverlapped=0x0) returned 1 [0154.472] ReadFile (in: hFile=0x238, lpBuffer=0x27cd5a4, nNumberOfBytesToRead=0x39c, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27cd5a4*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0154.473] ReadFile (in: hFile=0x238, lpBuffer=0x27cd958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27cd958*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0154.473] CloseHandle (hObject=0x238) returned 1 [0154.473] WriteFile (in: hFile=0x23c, lpBuffer=0x27cbeb0*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x27cbeb0*, lpNumberOfBytesWritten=0x1ada58*=0x490, lpOverlapped=0x0) returned 1 [0154.474] CloseHandle (hObject=0x23c) returned 1 [0154.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0154.474] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml")) returned 1 [0154.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.EnyBenied", lpFilePart=0x0) returned 0x62 [0154.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0154.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0154.477] GetFileType (hFile=0x23c) returned 0x1 [0154.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0154.477] GetFileType (hFile=0x23c) returned 0x1 [0154.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0154.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0154.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0154.862] GetFileType (hFile=0x238) returned 0x1 [0154.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0154.862] GetFileType (hFile=0x238) returned 0x1 [0154.862] ReadFile (in: hFile=0x238, lpBuffer=0x2715160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2715160*, lpNumberOfBytesRead=0x1adb88*=0x39, lpOverlapped=0x0) returned 1 [0154.863] ReadFile (in: hFile=0x238, lpBuffer=0x2715160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2715160*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0154.863] CloseHandle (hObject=0x238) returned 1 [0154.863] WriteFile (in: hFile=0x23c, lpBuffer=0x27136d0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x27136d0*, lpNumberOfBytesWritten=0x1ada58*=0x60, lpOverlapped=0x0) returned 1 [0154.864] CloseHandle (hObject=0x23c) returned 1 [0154.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0154.864] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml")) returned 1 [0154.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0154.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", lpFilePart=0x0) returned 0x54 [0154.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", lpFilePart=0x0) returned 0x55 [0154.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0154.867] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0154.867] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0154.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0154.868] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0154.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0154.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0154.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0154.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", lpFilePart=0x0) returned 0x54 [0154.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", lpFilePart=0x0) returned 0x55 [0154.868] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0154.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0154.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0154.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0154.868] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0154.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0154.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0154.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0154.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0154.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", lpFilePart=0x0) returned 0x57 [0154.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0154.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0154.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0154.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0154.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0154.869] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0154.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0154.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0154.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0154.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0154.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", lpFilePart=0x0) returned 0x57 [0154.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0154.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0154.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0154.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0154.870] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0154.870] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0154.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0154.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0154.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x62 [0154.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0154.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0154.875] GetFileType (hFile=0x23c) returned 0x1 [0154.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0154.875] GetFileType (hFile=0x23c) returned 0x1 [0154.876] WriteFile (in: hFile=0x23c, lpBuffer=0x2724e58*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2724e58*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0154.877] CloseHandle (hObject=0x23c) returned 1 [0154.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\ENYBENY.png", lpFilePart=0x0) returned 0x62 [0154.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0154.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0154.877] GetFileType (hFile=0x23c) returned 0x1 [0154.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0154.877] GetFileType (hFile=0x23c) returned 0x1 [0154.877] WriteFile (in: hFile=0x23c, lpBuffer=0x2725f50*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2725f50*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0154.878] CloseHandle (hObject=0x23c) returned 1 [0154.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8d [0154.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0154.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0154.939] GetFileType (hFile=0x23c) returned 0x1 [0154.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0154.939] GetFileType (hFile=0x23c) returned 0x1 [0154.939] WriteFile (in: hFile=0x23c, lpBuffer=0x272cc58*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x272cc58*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0154.940] CloseHandle (hObject=0x23c) returned 1 [0154.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0154.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0154.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0154.943] GetFileType (hFile=0x23c) returned 0x1 [0154.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0154.943] GetFileType (hFile=0x23c) returned 0x1 [0154.943] WriteFile (in: hFile=0x23c, lpBuffer=0x27370f0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x27370f0*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0154.944] CloseHandle (hObject=0x23c) returned 1 [0154.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0154.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0154.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0154.945] GetFileType (hFile=0x23c) returned 0x1 [0154.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0154.945] GetFileType (hFile=0x23c) returned 0x1 [0154.945] WriteFile (in: hFile=0x23c, lpBuffer=0x27381e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x27381e8*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0154.946] CloseHandle (hObject=0x23c) returned 1 [0154.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0154.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0154.946] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0154.947] GetFileType (hFile=0x23c) returned 0x1 [0154.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0154.947] GetFileType (hFile=0x23c) returned 0x1 [0154.947] WriteFile (in: hFile=0x23c, lpBuffer=0x273eee0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x273eee0*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0154.947] CloseHandle (hObject=0x23c) returned 1 [0154.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\ENYBENY.TXT", lpFilePart=0x0) returned 0x58 [0154.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0154.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0154.948] GetFileType (hFile=0x23c) returned 0x1 [0154.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0154.948] GetFileType (hFile=0x23c) returned 0x1 [0154.949] WriteFile (in: hFile=0x23c, lpBuffer=0x2749358*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2749358*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0154.949] CloseHandle (hObject=0x23c) returned 1 [0154.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\ENYBENY.png", lpFilePart=0x0) returned 0x58 [0154.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0154.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0154.950] GetFileType (hFile=0x23c) returned 0x1 [0154.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0154.950] GetFileType (hFile=0x23c) returned 0x1 [0154.950] WriteFile (in: hFile=0x23c, lpBuffer=0x274a440*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x274a440*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0154.951] CloseHandle (hObject=0x23c) returned 1 [0154.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x83 [0154.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0154.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0154.952] GetFileType (hFile=0x23c) returned 0x1 [0154.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0154.952] GetFileType (hFile=0x23c) returned 0x1 [0154.952] WriteFile (in: hFile=0x23c, lpBuffer=0x2751108*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2751108*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0154.953] CloseHandle (hObject=0x23c) returned 1 [0154.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\ENYBENY.TXT", lpFilePart=0x0) returned 0x47 [0154.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0154.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0154.953] GetFileType (hFile=0x23c) returned 0x1 [0154.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0154.953] GetFileType (hFile=0x23c) returned 0x1 [0154.954] WriteFile (in: hFile=0x23c, lpBuffer=0x275b530*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x275b530*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0154.954] CloseHandle (hObject=0x23c) returned 1 [0154.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\ENYBENY.png", lpFilePart=0x0) returned 0x47 [0154.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0154.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0154.955] GetFileType (hFile=0x23c) returned 0x1 [0154.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0154.955] GetFileType (hFile=0x23c) returned 0x1 [0154.955] WriteFile (in: hFile=0x23c, lpBuffer=0x275c5f0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x275c5f0*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0154.956] CloseHandle (hObject=0x23c) returned 1 [0154.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x72 [0154.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0154.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0155.045] GetFileType (hFile=0x23c) returned 0x1 [0155.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0155.045] GetFileType (hFile=0x23c) returned 0x1 [0155.045] WriteFile (in: hFile=0x23c, lpBuffer=0x2763250*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2763250*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0155.046] CloseHandle (hObject=0x23c) returned 1 [0155.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3f [0155.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0155.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0155.047] GetFileType (hFile=0x23c) returned 0x1 [0155.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0155.051] GetFileType (hFile=0x23c) returned 0x1 [0155.052] WriteFile (in: hFile=0x23c, lpBuffer=0x276d658*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x276d658*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0155.053] CloseHandle (hObject=0x23c) returned 1 [0155.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\ENYBENY.png", lpFilePart=0x0) returned 0x3f [0155.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0155.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0155.054] GetFileType (hFile=0x23c) returned 0x1 [0155.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0155.054] GetFileType (hFile=0x23c) returned 0x1 [0155.054] WriteFile (in: hFile=0x23c, lpBuffer=0x276e708*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x276e708*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0155.056] CloseHandle (hObject=0x23c) returned 1 [0155.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6a [0155.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0155.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x23c [0155.058] GetFileType (hFile=0x23c) returned 0x1 [0155.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0155.058] GetFileType (hFile=0x23c) returned 0x1 [0155.058] WriteFile (in: hFile=0x23c, lpBuffer=0x2775338*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x2775338*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0155.059] CloseHandle (hObject=0x23c) returned 1 [0155.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0155.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0155.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0155.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0155.060] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.060] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.060] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.060] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.061] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.062] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.063] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.064] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.065] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.065] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.065] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.065] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.065] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0155.065] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0155.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0155.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0155.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0155.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0155.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0155.066] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0155.066] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.066] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.066] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.066] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.067] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.067] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.067] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.067] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.067] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.067] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.068] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.068] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.068] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.068] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.068] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.068] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.068] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.068] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.071] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.071] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.071] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.071] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.071] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0155.071] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0155.071] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0155.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0155.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0155.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a.EnyBenied", lpFilePart=0x0) returned 0x51 [0155.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0155.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\03ope5riknrpuq-0y8.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0155.074] GetFileType (hFile=0x23c) returned 0x1 [0155.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0155.074] GetFileType (hFile=0x23c) returned 0x1 [0155.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a", lpFilePart=0x0) returned 0x47 [0155.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0155.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\03ope5riknrpuq-0y8.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0155.528] GetFileType (hFile=0x238) returned 0x1 [0155.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0155.528] GetFileType (hFile=0x238) returned 0x1 [0155.528] ReadFile (in: hFile=0x238, lpBuffer=0x26c8d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26c8d80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.533] ReadFile (in: hFile=0x238, lpBuffer=0x26c8d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26c8d80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.534] ReadFile (in: hFile=0x238, lpBuffer=0x26c8d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26c8d80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.534] ReadFile (in: hFile=0x238, lpBuffer=0x26c8d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26c8d80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.534] ReadFile (in: hFile=0x238, lpBuffer=0x26c8d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26c8d80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.534] ReadFile (in: hFile=0x238, lpBuffer=0x26c8d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26c8d80*, lpNumberOfBytesRead=0x1adc88*=0xf70, lpOverlapped=0x0) returned 1 [0155.534] ReadFile (in: hFile=0x238, lpBuffer=0x26c8cd8, nNumberOfBytesToRead=0x90, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26c8cd8*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0155.534] ReadFile (in: hFile=0x238, lpBuffer=0x26c8d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26c8d80*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0155.535] CloseHandle (hObject=0x238) returned 1 [0155.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a", lpFilePart=0x0) returned 0x47 [0155.535] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\03oPe5riKnRPuq-0y8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\03ope5riknrpuq-0y8.m4a")) returned 1 [0155.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp.EnyBenied", lpFilePart=0x0) returned 0x46 [0155.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0155.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6aatm_q.odp.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0155.537] GetFileType (hFile=0x23c) returned 0x1 [0155.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0155.537] GetFileType (hFile=0x23c) returned 0x1 [0155.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp", lpFilePart=0x0) returned 0x3c [0155.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0155.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6aatm_q.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0155.882] GetFileType (hFile=0x238) returned 0x1 [0155.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0155.882] GetFileType (hFile=0x238) returned 0x1 [0155.882] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.884] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.888] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.888] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.888] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.888] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.889] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.889] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.889] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.889] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.889] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.890] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.890] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.890] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.890] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.891] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.891] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.891] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.891] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0155.892] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x7a2, lpOverlapped=0x0) returned 1 [0155.892] ReadFile (in: hFile=0x238, lpBuffer=0x261614a, nNumberOfBytesToRead=0x5e, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x261614a*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0155.892] ReadFile (in: hFile=0x238, lpBuffer=0x26161c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26161c0*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0155.892] CloseHandle (hObject=0x238) returned 1 [0155.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp", lpFilePart=0x0) returned 0x3c [0155.892] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\6aatm_q.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\6aatm_q.odp")) returned 1 [0155.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4.EnyBenied", lpFilePart=0x0) returned 0x4b [0155.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0155.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9d4fezchtqk_.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0155.895] GetFileType (hFile=0x23c) returned 0x1 [0155.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0155.895] GetFileType (hFile=0x23c) returned 0x1 [0156.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4", lpFilePart=0x0) returned 0x41 [0156.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0156.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9d4fezchtqk_.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0156.236] GetFileType (hFile=0x238) returned 0x1 [0156.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0156.236] GetFileType (hFile=0x238) returned 0x1 [0156.236] ReadFile (in: hFile=0x238, lpBuffer=0x27712b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27712b0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.241] ReadFile (in: hFile=0x238, lpBuffer=0x27712b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27712b0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.242] ReadFile (in: hFile=0x238, lpBuffer=0x27712b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27712b0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.242] ReadFile (in: hFile=0x238, lpBuffer=0x27712b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27712b0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.242] ReadFile (in: hFile=0x238, lpBuffer=0x27712b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27712b0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.242] ReadFile (in: hFile=0x238, lpBuffer=0x27712b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27712b0*, lpNumberOfBytesRead=0x1adc88*=0x39b, lpOverlapped=0x0) returned 1 [0156.243] ReadFile (in: hFile=0x238, lpBuffer=0x27712b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27712b0*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0156.243] CloseHandle (hObject=0x238) returned 1 [0156.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4", lpFilePart=0x0) returned 0x41 [0156.243] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9d4fEZChTQk_.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9d4fezchtqk_.mp4")) returned 1 [0156.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls.EnyBenied", lpFilePart=0x0) returned 0x49 [0156.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0156.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cmj s9wp05.xls.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0156.245] GetFileType (hFile=0x23c) returned 0x1 [0156.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0156.245] GetFileType (hFile=0x23c) returned 0x1 [0156.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls", lpFilePart=0x0) returned 0x3f [0156.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0156.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cmj s9wp05.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0156.614] GetFileType (hFile=0x238) returned 0x1 [0156.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0156.614] GetFileType (hFile=0x238) returned 0x1 [0156.614] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.619] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.620] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.620] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.620] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.620] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.621] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.621] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.621] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x6ac, lpOverlapped=0x0) returned 1 [0156.621] ReadFile (in: hFile=0x238, lpBuffer=0x26bd974, nNumberOfBytesToRead=0x154, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bd974*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0156.621] ReadFile (in: hFile=0x238, lpBuffer=0x26bdae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26bdae0*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0156.621] CloseHandle (hObject=0x238) returned 1 [0156.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls", lpFilePart=0x0) returned 0x3f [0156.621] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cmj S9Wp05.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cmj s9wp05.xls")) returned 1 [0156.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi.EnyBenied", lpFilePart=0x0) returned 0x46 [0156.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0156.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dene9fz.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0156.625] GetFileType (hFile=0x23c) returned 0x1 [0156.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0156.625] GetFileType (hFile=0x23c) returned 0x1 [0156.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi", lpFilePart=0x0) returned 0x3c [0156.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0156.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dene9fz.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0156.956] GetFileType (hFile=0x238) returned 0x1 [0156.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0156.956] GetFileType (hFile=0x238) returned 0x1 [0156.956] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.957] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.961] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.961] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.961] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.962] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.962] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.962] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.962] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.962] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.963] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0156.963] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x2f9, lpOverlapped=0x0) returned 1 [0156.963] ReadFile (in: hFile=0x238, lpBuffer=0x260d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d740*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0156.963] CloseHandle (hObject=0x238) returned 1 [0156.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi", lpFilePart=0x0) returned 0x3c [0156.963] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\DenE9Fz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dene9fz.avi")) returned 1 [0156.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg.EnyBenied", lpFilePart=0x0) returned 0x47 [0156.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0156.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dnlg7ihw.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0156.966] GetFileType (hFile=0x23c) returned 0x1 [0156.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0156.966] GetFileType (hFile=0x23c) returned 0x1 [0157.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg", lpFilePart=0x0) returned 0x3d [0157.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0157.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dnlg7ihw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0157.300] GetFileType (hFile=0x238) returned 0x1 [0157.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0157.300] GetFileType (hFile=0x238) returned 0x1 [0157.300] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.305] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.306] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.306] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.306] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.306] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.306] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.307] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.307] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x8d6, lpOverlapped=0x0) returned 1 [0157.307] ReadFile (in: hFile=0x238, lpBuffer=0x275fd36, nNumberOfBytesToRead=0x32a, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x275fd36*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0157.307] ReadFile (in: hFile=0x238, lpBuffer=0x2760078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2760078*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0157.307] CloseHandle (hObject=0x238) returned 1 [0157.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg", lpFilePart=0x0) returned 0x3d [0157.307] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dnlg7Ihw.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dnlg7ihw.jpg")) returned 1 [0157.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf.EnyBenied", lpFilePart=0x0) returned 0x50 [0157.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0157.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ea7cgvludi9avmktd.pdf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0157.310] GetFileType (hFile=0x23c) returned 0x1 [0157.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0157.310] GetFileType (hFile=0x23c) returned 0x1 [0157.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf", lpFilePart=0x0) returned 0x46 [0157.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0157.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ea7cgvludi9avmktd.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0157.728] GetFileType (hFile=0x238) returned 0x1 [0157.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0157.728] GetFileType (hFile=0x238) returned 0x1 [0157.728] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.735] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.735] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.735] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.736] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.736] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.736] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.737] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.737] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.737] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.737] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.738] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.738] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.738] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.738] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.739] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.739] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.739] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.739] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.740] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.740] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0157.740] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x77c, lpOverlapped=0x0) returned 1 [0157.740] ReadFile (in: hFile=0x238, lpBuffer=0x26afefc, nNumberOfBytesToRead=0x84, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26afefc*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0157.741] ReadFile (in: hFile=0x238, lpBuffer=0x26aff98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26aff98*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0157.741] CloseHandle (hObject=0x238) returned 1 [0157.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf", lpFilePart=0x0) returned 0x46 [0157.741] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\EA7cGvLUdi9aVmKTd.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ea7cgvludi9avmktd.pdf")) returned 1 [0157.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx.EnyBenied", lpFilePart=0x0) returned 0x4d [0157.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0157.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\elc3j_zmra4zo.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0157.744] GetFileType (hFile=0x23c) returned 0x1 [0157.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0157.744] GetFileType (hFile=0x23c) returned 0x1 [0158.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx", lpFilePart=0x0) returned 0x43 [0158.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0158.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\elc3j_zmra4zo.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0158.098] GetFileType (hFile=0x238) returned 0x1 [0158.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0158.098] GetFileType (hFile=0x238) returned 0x1 [0158.098] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.103] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.103] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.104] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.104] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.104] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.104] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.104] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.105] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.105] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.105] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.105] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.106] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.106] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x315, lpOverlapped=0x0) returned 1 [0158.106] ReadFile (in: hFile=0x238, lpBuffer=0x260d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x260d210*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0158.106] CloseHandle (hObject=0x238) returned 1 [0158.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx", lpFilePart=0x0) returned 0x43 [0158.106] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ELC3j_zMrA4ZO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\elc3j_zmra4zo.xlsx")) returned 1 [0158.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg.EnyBenied", lpFilePart=0x0) returned 0x46 [0158.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0158.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eothyuq.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0158.109] GetFileType (hFile=0x23c) returned 0x1 [0158.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0158.109] GetFileType (hFile=0x23c) returned 0x1 [0158.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg", lpFilePart=0x0) returned 0x3c [0158.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0158.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eothyuq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0158.446] GetFileType (hFile=0x238) returned 0x1 [0158.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0158.446] GetFileType (hFile=0x238) returned 0x1 [0158.446] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.451] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.451] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.451] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.451] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.452] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.452] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.452] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.452] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.452] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.453] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.453] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.453] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.453] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.453] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.453] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.454] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.454] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.454] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0158.454] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x229, lpOverlapped=0x0) returned 1 [0158.454] ReadFile (in: hFile=0x238, lpBuffer=0x2761bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2761bf8*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0158.454] CloseHandle (hObject=0x238) returned 1 [0158.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg", lpFilePart=0x0) returned 0x3c [0158.455] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\eOthyUQ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\eothyuq.jpg")) returned 1 [0158.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.EnyBenied", lpFilePart=0x0) returned 0x51 [0158.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0158.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0158.457] GetFileType (hFile=0x23c) returned 0x1 [0158.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0158.457] GetFileType (hFile=0x23c) returned 0x1 [0158.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x47 [0158.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0158.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0158.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1aa490) returned 1 [0158.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3c [0158.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0158.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0158.982] GetFileType (hFile=0x238) returned 0x1 [0158.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0158.982] GetFileType (hFile=0x238) returned 0x1 [0158.982] WriteFile (in: hFile=0x238, lpBuffer=0x26c62a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26c62a8*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0158.983] CloseHandle (hObject=0x238) returned 1 [0158.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ENYBENY.png", lpFilePart=0x0) returned 0x3c [0158.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0158.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0158.984] GetFileType (hFile=0x238) returned 0x1 [0158.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0158.984] GetFileType (hFile=0x238) returned 0x1 [0158.984] WriteFile (in: hFile=0x238, lpBuffer=0x26c7358*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x26c7358*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0158.985] CloseHandle (hObject=0x238) returned 1 [0158.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x67 [0158.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0158.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0158.986] GetFileType (hFile=0x238) returned 0x1 [0158.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0158.986] GetFileType (hFile=0x238) returned 0x1 [0158.987] WriteFile (in: hFile=0x238, lpBuffer=0x26cdf78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26cdf78*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0158.994] CloseHandle (hObject=0x238) returned 1 [0158.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0158.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x44 [0158.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x45 [0158.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0xffffffffffffffff [0158.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0158.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\ENYBENY.TXT", lpFilePart=0x0) returned 0x50 [0158.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0158.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.000] GetFileType (hFile=0x238) returned 0x1 [0159.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0159.000] GetFileType (hFile=0x238) returned 0x1 [0159.000] WriteFile (in: hFile=0x238, lpBuffer=0x26d9950*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26d9950*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0159.001] CloseHandle (hObject=0x238) returned 1 [0159.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\ENYBENY.png", lpFilePart=0x0) returned 0x50 [0159.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0159.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.002] GetFileType (hFile=0x238) returned 0x1 [0159.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0159.002] GetFileType (hFile=0x238) returned 0x1 [0159.002] WriteFile (in: hFile=0x238, lpBuffer=0x26daa28*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x26daa28*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0159.003] CloseHandle (hObject=0x238) returned 1 [0159.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7b [0159.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0159.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.004] GetFileType (hFile=0x238) returned 0x1 [0159.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0159.004] GetFileType (hFile=0x238) returned 0x1 [0159.004] WriteFile (in: hFile=0x238, lpBuffer=0x26e16c0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26e16c0*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0159.005] CloseHandle (hObject=0x238) returned 1 [0159.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0159.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0159.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0159.005] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0159.006] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0159.006] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0159.006] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0159.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0159.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0159.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0159.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0159.006] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0159.006] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0159.007] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0159.007] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0159.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0159.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\ENYBENY.TXT", lpFilePart=0x0) returned 0x44 [0159.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0159.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.008] GetFileType (hFile=0x238) returned 0x1 [0159.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0159.008] GetFileType (hFile=0x238) returned 0x1 [0159.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0159.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0159.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.010] GetFileType (hFile=0x238) returned 0x1 [0159.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0159.010] GetFileType (hFile=0x238) returned 0x1 [0159.010] WriteFile (in: hFile=0x238, lpBuffer=0x26ee9d8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x26ee9d8*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0159.013] CloseHandle (hObject=0x238) returned 1 [0159.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6f [0159.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0159.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.014] GetFileType (hFile=0x238) returned 0x1 [0159.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0159.014] GetFileType (hFile=0x238) returned 0x1 [0159.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ENYBENY.TXT", lpFilePart=0x0) returned 0x37 [0159.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0159.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.015] GetFileType (hFile=0x238) returned 0x1 [0159.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0159.015] GetFileType (hFile=0x238) returned 0x1 [0159.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ENYBENY.png", lpFilePart=0x0) returned 0x37 [0159.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0159.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.016] GetFileType (hFile=0x238) returned 0x1 [0159.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0159.016] GetFileType (hFile=0x238) returned 0x1 [0159.017] WriteFile (in: hFile=0x238, lpBuffer=0x2700ab0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x2700ab0*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0159.018] CloseHandle (hObject=0x238) returned 1 [0159.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x62 [0159.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0159.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.018] GetFileType (hFile=0x238) returned 0x1 [0159.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0159.018] GetFileType (hFile=0x238) returned 0x1 [0159.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0159.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", lpFilePart=0x0) returned 0x2e [0159.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x2f [0159.019] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0159.019] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0159.019] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0159.020] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0159.020] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0159.020] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0159.020] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0159.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0159.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0159.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", lpFilePart=0x0) returned 0x2e [0159.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x2f [0159.020] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0159.020] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0159.020] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0159.020] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0159.021] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0159.021] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0159.021] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0159.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0159.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0159.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", lpFilePart=0x0) returned 0x34 [0159.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", lpFilePart=0x0) returned 0x35 [0159.021] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0159.022] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0159.022] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0159.022] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0159.022] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0159.022] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0159.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0159.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0159.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", lpFilePart=0x0) returned 0x34 [0159.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", lpFilePart=0x0) returned 0x35 [0159.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0159.023] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0159.023] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0159.023] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0159.023] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0159.023] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0159.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0159.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0159.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3c [0159.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3d [0159.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0159.024] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0159.024] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0159.024] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0159.024] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0159.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0159.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0159.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3c [0159.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3d [0159.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0159.024] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0159.025] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0159.025] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0159.025] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0159.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0159.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0159.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x41 [0159.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x42 [0159.025] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0159.308] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.308] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.308] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.309] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.309] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0159.309] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0159.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0159.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0159.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x41 [0159.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x42 [0159.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0159.311] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.311] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.311] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.312] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.312] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0159.312] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0159.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0159.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.EnyBenied", lpFilePart=0x0) returned 0x5a [0159.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0159.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.315] GetFileType (hFile=0x238) returned 0x1 [0159.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.315] GetFileType (hFile=0x238) returned 0x1 [0159.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0159.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0159.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x248 [0159.652] GetFileType (hFile=0x248) returned 0x1 [0159.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.652] GetFileType (hFile=0x248) returned 0x1 [0159.652] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.658] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.658] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.659] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.659] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.659] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.659] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.659] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.660] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.660] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.660] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x5ff, lpOverlapped=0x0) returned 1 [0159.660] ReadFile (in: hFile=0x248, lpBuffer=0x265901f, nNumberOfBytesToRead=0x201, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x265901f*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0159.660] ReadFile (in: hFile=0x248, lpBuffer=0x2659238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2659238*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0159.660] CloseHandle (hObject=0x248) returned 1 [0159.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0159.661] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip")) returned 1 [0159.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0159.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", lpFilePart=0x0) returned 0x48 [0159.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", lpFilePart=0x0) returned 0x49 [0159.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0159.662] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.663] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0159.663] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0159.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0159.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0159.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", lpFilePart=0x0) returned 0x48 [0159.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", lpFilePart=0x0) returned 0x49 [0159.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0159.663] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.663] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0159.663] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0159.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0159.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\ENYBENY.TXT", lpFilePart=0x0) returned 0x54 [0159.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0159.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.666] GetFileType (hFile=0x238) returned 0x1 [0159.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0159.666] GetFileType (hFile=0x238) returned 0x1 [0159.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\ENYBENY.png", lpFilePart=0x0) returned 0x54 [0159.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0159.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.668] GetFileType (hFile=0x238) returned 0x1 [0159.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0159.668] GetFileType (hFile=0x238) returned 0x1 [0159.668] WriteFile (in: hFile=0x238, lpBuffer=0x2671400*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2671400*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0159.669] CloseHandle (hObject=0x238) returned 1 [0159.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7f [0159.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0159.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.670] GetFileType (hFile=0x238) returned 0x1 [0159.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0159.670] GetFileType (hFile=0x238) returned 0x1 [0159.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4d [0159.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0159.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.673] GetFileType (hFile=0x238) returned 0x1 [0159.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0159.673] GetFileType (hFile=0x238) returned 0x1 [0159.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ENYBENY.png", lpFilePart=0x0) returned 0x4d [0159.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.674] GetFileType (hFile=0x238) returned 0x1 [0159.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0159.675] GetFileType (hFile=0x238) returned 0x1 [0159.675] WriteFile (in: hFile=0x238, lpBuffer=0x26835c8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26835c8*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0159.676] CloseHandle (hObject=0x238) returned 1 [0159.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x78 [0159.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0159.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.676] GetFileType (hFile=0x238) returned 0x1 [0159.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0159.676] GetFileType (hFile=0x238) returned 0x1 [0159.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\ENYBENY.TXT", lpFilePart=0x0) returned 0x48 [0159.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0159.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.678] GetFileType (hFile=0x238) returned 0x1 [0159.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0159.678] GetFileType (hFile=0x238) returned 0x1 [0159.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\ENYBENY.png", lpFilePart=0x0) returned 0x48 [0159.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0159.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.679] GetFileType (hFile=0x238) returned 0x1 [0159.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0159.679] GetFileType (hFile=0x238) returned 0x1 [0159.679] WriteFile (in: hFile=0x238, lpBuffer=0x2695758*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2695758*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0159.681] CloseHandle (hObject=0x238) returned 1 [0159.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x73 [0159.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0159.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.681] GetFileType (hFile=0x238) returned 0x1 [0159.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0159.681] GetFileType (hFile=0x238) returned 0x1 [0159.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0159.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x40 [0159.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x41 [0159.682] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0159.683] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0159.683] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0159.683] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0159.683] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0159.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0159.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0159.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x40 [0159.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x41 [0159.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0159.684] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0159.684] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0159.684] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0159.684] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0159.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0159.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0159.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4d [0159.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4e [0159.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0159.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0159.795] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0159.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0159.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0159.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4d [0159.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4e [0159.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0159.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0159.796] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0159.796] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0159.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0159.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0159.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", lpFilePart=0x0) returned 0x65 [0159.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", lpFilePart=0x0) returned 0x66 [0159.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0159.867] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.868] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.869] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0159.869] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0159.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0159.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0159.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", lpFilePart=0x0) returned 0x65 [0159.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", lpFilePart=0x0) returned 0x66 [0159.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0159.871] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.871] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.871] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.871] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.871] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.871] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.871] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.872] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.872] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.872] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.872] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.872] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.872] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.872] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0159.872] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0159.872] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0159.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0159.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", lpFilePart=0x0) returned 0x69 [0159.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", lpFilePart=0x0) returned 0x6a [0159.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.874] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.874] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.874] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", lpFilePart=0x0) returned 0x69 [0159.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", lpFilePart=0x0) returned 0x6a [0159.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.875] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.875] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.875] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.876] GetFileType (hFile=0x238) returned 0x1 [0159.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.876] GetFileType (hFile=0x238) returned 0x1 [0159.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.878] GetFileType (hFile=0x238) returned 0x1 [0159.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.878] GetFileType (hFile=0x238) returned 0x1 [0159.878] WriteFile (in: hFile=0x238, lpBuffer=0x26b5338*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26b5338*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0159.879] CloseHandle (hObject=0x238) returned 1 [0159.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.879] GetFileType (hFile=0x238) returned 0x1 [0159.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.879] GetFileType (hFile=0x238) returned 0x1 [0159.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", lpFilePart=0x0) returned 0x69 [0159.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", lpFilePart=0x0) returned 0x6a [0159.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.882] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.882] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.882] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", lpFilePart=0x0) returned 0x69 [0159.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", lpFilePart=0x0) returned 0x6a [0159.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.883] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.883] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.883] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.884] GetFileType (hFile=0x238) returned 0x1 [0159.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.884] GetFileType (hFile=0x238) returned 0x1 [0159.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.886] GetFileType (hFile=0x238) returned 0x1 [0159.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.886] GetFileType (hFile=0x238) returned 0x1 [0159.886] WriteFile (in: hFile=0x238, lpBuffer=0x26c9ed0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26c9ed0*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0159.887] CloseHandle (hObject=0x238) returned 1 [0159.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.888] GetFileType (hFile=0x238) returned 0x1 [0159.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.888] GetFileType (hFile=0x238) returned 0x1 [0159.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", lpFilePart=0x0) returned 0x69 [0159.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", lpFilePart=0x0) returned 0x6a [0159.889] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.890] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.890] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.890] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", lpFilePart=0x0) returned 0x69 [0159.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", lpFilePart=0x0) returned 0x6a [0159.890] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.890] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.890] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.891] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.891] GetFileType (hFile=0x238) returned 0x1 [0159.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.891] GetFileType (hFile=0x238) returned 0x1 [0159.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.893] GetFileType (hFile=0x238) returned 0x1 [0159.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.893] GetFileType (hFile=0x238) returned 0x1 [0159.893] WriteFile (in: hFile=0x238, lpBuffer=0x26dea68*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26dea68*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0159.894] CloseHandle (hObject=0x238) returned 1 [0159.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.895] GetFileType (hFile=0x238) returned 0x1 [0159.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.895] GetFileType (hFile=0x238) returned 0x1 [0159.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", lpFilePart=0x0) returned 0x69 [0159.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", lpFilePart=0x0) returned 0x6a [0159.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.896] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.897] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.897] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", lpFilePart=0x0) returned 0x69 [0159.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", lpFilePart=0x0) returned 0x6a [0159.897] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.897] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.897] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.897] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", lpFilePart=0x0) returned 0x69 [0159.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", lpFilePart=0x0) returned 0x6a [0159.902] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.903] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.903] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.903] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", lpFilePart=0x0) returned 0x69 [0159.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", lpFilePart=0x0) returned 0x6a [0159.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.904] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.904] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.904] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", lpFilePart=0x0) returned 0x69 [0159.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", lpFilePart=0x0) returned 0x6a [0159.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.909] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.909] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.909] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", lpFilePart=0x0) returned 0x69 [0159.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", lpFilePart=0x0) returned 0x6a [0159.909] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.909] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.910] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.910] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", lpFilePart=0x0) returned 0x69 [0159.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", lpFilePart=0x0) returned 0x6a [0159.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.915] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.915] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.915] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", lpFilePart=0x0) returned 0x69 [0159.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", lpFilePart=0x0) returned 0x6a [0159.915] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.916] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.916] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.916] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", lpFilePart=0x0) returned 0x69 [0159.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", lpFilePart=0x0) returned 0x6a [0159.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.924] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.924] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.924] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", lpFilePart=0x0) returned 0x69 [0159.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", lpFilePart=0x0) returned 0x6a [0159.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.924] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.925] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.925] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", lpFilePart=0x0) returned 0x69 [0159.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", lpFilePart=0x0) returned 0x6a [0159.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.931] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.931] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.932] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", lpFilePart=0x0) returned 0x69 [0159.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", lpFilePart=0x0) returned 0x6a [0159.932] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.932] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.932] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.933] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", lpFilePart=0x0) returned 0x69 [0159.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", lpFilePart=0x0) returned 0x6a [0159.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.940] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.940] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.940] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", lpFilePart=0x0) returned 0x69 [0159.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", lpFilePart=0x0) returned 0x6a [0159.940] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.940] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.941] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.941] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", lpFilePart=0x0) returned 0x69 [0159.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", lpFilePart=0x0) returned 0x6a [0159.948] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.949] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.949] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.949] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", lpFilePart=0x0) returned 0x69 [0159.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", lpFilePart=0x0) returned 0x6a [0159.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.950] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.950] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.950] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", lpFilePart=0x0) returned 0x69 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", lpFilePart=0x0) returned 0x6a [0159.956] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.956] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.957] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.957] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", lpFilePart=0x0) returned 0x69 [0159.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", lpFilePart=0x0) returned 0x6a [0159.957] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.957] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.957] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.957] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", lpFilePart=0x0) returned 0x69 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", lpFilePart=0x0) returned 0x6a [0159.964] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.964] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.964] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.964] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", lpFilePart=0x0) returned 0x69 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", lpFilePart=0x0) returned 0x6a [0159.964] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0159.965] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0159.965] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0159.965] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0159.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0159.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0159.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\ENYBENY.TXT", lpFilePart=0x0) returned 0x75 [0159.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\ENYBENY.png", lpFilePart=0x0) returned 0x75 [0159.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0159.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0159.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa0 [0159.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0159.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0159.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ENYBENY.TXT", lpFilePart=0x0) returned 0x71 [0159.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0159.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0159.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ENYBENY.png", lpFilePart=0x0) returned 0x71 [0159.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0159.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0159.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x9c [0159.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0159.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0159.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.TXT", lpFilePart=0x0) returned 0x59 [0159.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0159.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0159.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0159.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.png", lpFilePart=0x0) returned 0x59 [0159.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0159.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0159.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0159.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x84 [0159.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0159.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0160.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4c [0160.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\ENYBENY.png", lpFilePart=0x0) returned 0x4c [0160.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0160.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0160.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0160.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x77 [0160.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\ENYBENY.TXT", lpFilePart=0x0) returned 0x40 [0160.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0160.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0160.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\ENYBENY.png", lpFilePart=0x0) returned 0x40 [0160.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0160.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0160.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0160.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6b [0160.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0160.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0160.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0160.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x38 [0160.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x39 [0160.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0160.426] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0160.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0160.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0160.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x38 [0160.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x39 [0160.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.426] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0160.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0160.427] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0160.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0160.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x49 [0160.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x4a [0160.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0160.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0160.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0160.427] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0160.427] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x49 [0160.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x4a [0160.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0160.428] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0160.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x51 [0160.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x52 [0160.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.428] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.429] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.547] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.547] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.547] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.547] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.550] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.550] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.550] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.550] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.550] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.550] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.551] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.551] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.551] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.551] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.551] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.551] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.552] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.552] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.552] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.552] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.552] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0160.552] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0160.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0160.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0160.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x51 [0160.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x52 [0160.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0160.553] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.553] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.553] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.554] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.554] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.554] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.554] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.554] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.554] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.555] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.555] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.555] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.555] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.556] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.556] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.556] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.556] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.556] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.556] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.558] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.558] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.558] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.558] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.558] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.559] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.559] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.559] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.559] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.559] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.559] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.560] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.560] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.560] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.560] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.560] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.561] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.561] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.561] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.561] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.561] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.561] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.562] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.562] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.562] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.562] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.562] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.563] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.563] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.563] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.563] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.563] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.563] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0160.564] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0160.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0160.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5d [0160.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0160.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.566] GetFileType (hFile=0x238) returned 0x1 [0160.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0160.566] GetFileType (hFile=0x238) returned 0x1 [0160.567] WriteFile (in: hFile=0x238, lpBuffer=0x262bb90*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x262bb90*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0160.568] CloseHandle (hObject=0x238) returned 1 [0160.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ENYBENY.png", lpFilePart=0x0) returned 0x5d [0160.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0160.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0160.569] GetFileType (hFile=0x238) returned 0x1 [0160.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0160.569] GetFileType (hFile=0x238) returned 0x1 [0160.569] WriteFile (in: hFile=0x238, lpBuffer=0x262cc80*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x262cc80*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0160.571] CloseHandle (hObject=0x238) returned 1 [0160.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x88 [0160.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0160.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.572] GetFileType (hFile=0x238) returned 0x1 [0160.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0160.572] GetFileType (hFile=0x238) returned 0x1 [0160.572] WriteFile (in: hFile=0x238, lpBuffer=0x2633970*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2633970*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0160.573] CloseHandle (hObject=0x238) returned 1 [0160.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0160.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x52 [0160.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x53 [0160.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0160.573] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.574] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.574] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.574] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.574] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.574] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.574] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.575] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.575] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.575] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.575] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.575] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.575] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0160.577] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0160.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0160.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0160.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x52 [0160.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x53 [0160.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0160.578] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0160.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0160.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5e [0160.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0160.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.579] GetFileType (hFile=0x238) returned 0x1 [0160.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0160.579] GetFileType (hFile=0x238) returned 0x1 [0160.580] WriteFile (in: hFile=0x238, lpBuffer=0x2659098*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2659098*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0160.580] CloseHandle (hObject=0x238) returned 1 [0160.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ENYBENY.png", lpFilePart=0x0) returned 0x5e [0160.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0160.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0160.581] GetFileType (hFile=0x238) returned 0x1 [0160.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0160.581] GetFileType (hFile=0x238) returned 0x1 [0160.581] WriteFile (in: hFile=0x238, lpBuffer=0x265a188*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x265a188*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0160.582] CloseHandle (hObject=0x238) returned 1 [0160.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x89 [0160.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0160.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.583] GetFileType (hFile=0x238) returned 0x1 [0160.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0160.583] GetFileType (hFile=0x238) returned 0x1 [0160.583] WriteFile (in: hFile=0x238, lpBuffer=0x2660e78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2660e78*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0160.584] CloseHandle (hObject=0x238) returned 1 [0160.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x55 [0160.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.585] GetFileType (hFile=0x238) returned 0x1 [0160.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.585] GetFileType (hFile=0x238) returned 0x1 [0160.585] WriteFile (in: hFile=0x238, lpBuffer=0x266b2e0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x266b2e0*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0160.587] CloseHandle (hObject=0x238) returned 1 [0160.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\ENYBENY.png", lpFilePart=0x0) returned 0x55 [0160.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0160.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0160.588] GetFileType (hFile=0x238) returned 0x1 [0160.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0160.588] GetFileType (hFile=0x238) returned 0x1 [0160.588] WriteFile (in: hFile=0x238, lpBuffer=0x266c3c0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x266c3c0*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0160.589] CloseHandle (hObject=0x238) returned 1 [0160.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x80 [0160.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.655] GetFileType (hFile=0x238) returned 0x1 [0160.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.655] GetFileType (hFile=0x238) returned 0x1 [0160.655] WriteFile (in: hFile=0x238, lpBuffer=0x2673080*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2673080*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0160.656] CloseHandle (hObject=0x238) returned 1 [0160.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3e [0160.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3f [0160.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.803] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3e [0160.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3f [0160.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.804] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0160.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.805] GetFileType (hFile=0x238) returned 0x1 [0160.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.805] GetFileType (hFile=0x238) returned 0x1 [0160.806] WriteFile (in: hFile=0x238, lpBuffer=0x267f448*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x267f448*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0160.821] CloseHandle (hObject=0x238) returned 1 [0160.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0160.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0160.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0160.823] GetFileType (hFile=0x238) returned 0x1 [0160.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0160.823] GetFileType (hFile=0x238) returned 0x1 [0160.823] WriteFile (in: hFile=0x238, lpBuffer=0x2680510*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2680510*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0160.824] CloseHandle (hObject=0x238) returned 1 [0160.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0160.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.825] GetFileType (hFile=0x238) returned 0x1 [0160.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.825] GetFileType (hFile=0x238) returned 0x1 [0160.826] WriteFile (in: hFile=0x238, lpBuffer=0x2687188*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2687188*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0160.827] CloseHandle (hObject=0x238) returned 1 [0160.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3f [0160.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x40 [0160.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.827] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3f [0160.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x40 [0160.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.828] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0160.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.829] GetFileType (hFile=0x238) returned 0x1 [0160.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.829] GetFileType (hFile=0x238) returned 0x1 [0160.830] WriteFile (in: hFile=0x238, lpBuffer=0x2693570*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2693570*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0160.831] CloseHandle (hObject=0x238) returned 1 [0160.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0160.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0160.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0160.832] GetFileType (hFile=0x238) returned 0x1 [0160.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0160.833] GetFileType (hFile=0x238) returned 0x1 [0160.833] WriteFile (in: hFile=0x238, lpBuffer=0x2694638*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2694638*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0160.834] CloseHandle (hObject=0x238) returned 1 [0160.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0160.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0160.835] GetFileType (hFile=0x238) returned 0x1 [0160.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.836] GetFileType (hFile=0x238) returned 0x1 [0160.836] WriteFile (in: hFile=0x238, lpBuffer=0x269b2b0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x269b2b0*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0160.837] CloseHandle (hObject=0x238) returned 1 [0160.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x40 [0160.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x41 [0160.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.838] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x40 [0160.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x41 [0160.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.838] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4c [0160.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\ENYBENY.png", lpFilePart=0x0) returned 0x4c [0160.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0160.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0160.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x77 [0160.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x40 [0160.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x41 [0160.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.845] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x40 [0160.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x41 [0160.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.845] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4c [0160.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\ENYBENY.png", lpFilePart=0x0) returned 0x4c [0160.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0160.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0160.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x77 [0160.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0160.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0160.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x4a [0160.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4b [0160.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.852] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0160.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x4a [0160.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4b [0160.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0160.852] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0160.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0160.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0160.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x53 [0160.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x54 [0160.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0160.853] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0160.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0160.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0160.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x53 [0160.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x54 [0160.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0160.853] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0160.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0160.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0160.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", lpFilePart=0x0) returned 0x5c [0160.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", lpFilePart=0x0) returned 0x5d [0160.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0160.854] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0160.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0160.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0160.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", lpFilePart=0x0) returned 0x5c [0160.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", lpFilePart=0x0) returned 0x5d [0160.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0160.855] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0160.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0160.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0160.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.EnyBenied", lpFilePart=0x0) returned 0x7e [0160.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0160.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0161.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0161.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0161.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0161.350] GetFileType (hFile=0x23c) returned 0x1 [0161.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0161.350] GetFileType (hFile=0x23c) returned 0x1 [0161.350] ReadFile (in: hFile=0x23c, lpBuffer=0x25f1c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x25f1c60*, lpNumberOfBytesRead=0x1adb08*=0xd, lpOverlapped=0x0) returned 1 [0161.351] ReadFile (in: hFile=0x23c, lpBuffer=0x25f1c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x25f1c60*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0161.351] CloseHandle (hObject=0x23c) returned 1 [0161.352] WriteFile (in: hFile=0x238, lpBuffer=0x25f0180*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x25f0180*, lpNumberOfBytesWritten=0x1ad9d8*=0x30, lpOverlapped=0x0) returned 1 [0161.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x1ad600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0161.353] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml")) returned 1 [0161.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0161.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0161.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0161.355] GetFileType (hFile=0x238) returned 0x1 [0161.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0161.356] GetFileType (hFile=0x238) returned 0x1 [0161.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0161.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0161.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0161.357] GetFileType (hFile=0x238) returned 0x1 [0161.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0161.358] GetFileType (hFile=0x238) returned 0x1 [0161.358] WriteFile (in: hFile=0x238, lpBuffer=0x25fd398*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x25fd398*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0161.359] CloseHandle (hObject=0x238) returned 1 [0161.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0161.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0161.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0161.420] GetFileType (hFile=0x238) returned 0x1 [0161.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0161.420] GetFileType (hFile=0x238) returned 0x1 [0161.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0161.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", lpFilePart=0x0) returned 0x5c [0161.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", lpFilePart=0x0) returned 0x5d [0161.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0161.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.423] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0161.423] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0161.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0161.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0161.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0161.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", lpFilePart=0x0) returned 0x5c [0161.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", lpFilePart=0x0) returned 0x5d [0161.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0161.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.424] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0161.424] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0161.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0161.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0161.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.EnyBenied", lpFilePart=0x0) returned 0x78 [0161.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0161.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0161.426] GetFileType (hFile=0x238) returned 0x1 [0161.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0161.426] GetFileType (hFile=0x238) returned 0x1 [0161.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0161.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0161.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0161.788] GetFileType (hFile=0x23c) returned 0x1 [0161.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0161.788] GetFileType (hFile=0x23c) returned 0x1 [0161.788] ReadFile (in: hFile=0x23c, lpBuffer=0x274e678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x274e678*, lpNumberOfBytesRead=0x1adb08*=0xd, lpOverlapped=0x0) returned 1 [0161.789] ReadFile (in: hFile=0x23c, lpBuffer=0x274e678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x274e678*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0161.789] CloseHandle (hObject=0x23c) returned 1 [0161.789] WriteFile (in: hFile=0x238, lpBuffer=0x274cbb0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x274cbb0*, lpNumberOfBytesWritten=0x1ad9d8*=0x30, lpOverlapped=0x0) returned 1 [0161.790] CloseHandle (hObject=0x238) returned 1 [0161.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x1ad600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0161.790] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml")) returned 1 [0161.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0161.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0161.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0161.794] GetFileType (hFile=0x238) returned 0x1 [0161.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0161.794] GetFileType (hFile=0x238) returned 0x1 [0161.794] WriteFile (in: hFile=0x238, lpBuffer=0x2758c98*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2758c98*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0161.795] CloseHandle (hObject=0x238) returned 1 [0161.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0161.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0161.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0161.796] GetFileType (hFile=0x238) returned 0x1 [0161.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0161.796] GetFileType (hFile=0x238) returned 0x1 [0161.796] WriteFile (in: hFile=0x238, lpBuffer=0x2759da0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2759da0*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0161.797] CloseHandle (hObject=0x238) returned 1 [0161.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0161.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0161.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0161.799] GetFileType (hFile=0x238) returned 0x1 [0161.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0161.799] GetFileType (hFile=0x238) returned 0x1 [0161.799] WriteFile (in: hFile=0x238, lpBuffer=0x2760ac8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2760ac8*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0161.800] CloseHandle (hObject=0x238) returned 1 [0161.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0161.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", lpFilePart=0x0) returned 0x5c [0161.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", lpFilePart=0x0) returned 0x5d [0161.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0161.801] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.801] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0161.801] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0161.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0161.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0161.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0161.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", lpFilePart=0x0) returned 0x5c [0161.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", lpFilePart=0x0) returned 0x5d [0161.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0161.801] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.802] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0161.802] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0161.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0161.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0161.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0161.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0161.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0161.804] GetFileType (hFile=0x238) returned 0x1 [0161.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0161.804] GetFileType (hFile=0x238) returned 0x1 [0161.805] WriteFile (in: hFile=0x238, lpBuffer=0x276d500*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x276d500*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0161.806] CloseHandle (hObject=0x238) returned 1 [0161.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0161.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0161.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0161.806] GetFileType (hFile=0x238) returned 0x1 [0161.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0161.806] GetFileType (hFile=0x238) returned 0x1 [0161.806] WriteFile (in: hFile=0x238, lpBuffer=0x276e608*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x276e608*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0161.808] CloseHandle (hObject=0x238) returned 1 [0161.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0161.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0161.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0161.808] GetFileType (hFile=0x238) returned 0x1 [0161.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0161.808] GetFileType (hFile=0x238) returned 0x1 [0161.809] WriteFile (in: hFile=0x238, lpBuffer=0x2775330*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2775330*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0161.809] CloseHandle (hObject=0x238) returned 1 [0161.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0161.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", lpFilePart=0x0) returned 0x5c [0161.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", lpFilePart=0x0) returned 0x5d [0161.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0161.810] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.810] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.810] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0161.811] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0161.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0161.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0161.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0161.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", lpFilePart=0x0) returned 0x5c [0161.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", lpFilePart=0x0) returned 0x5d [0161.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0161.811] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.811] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0161.811] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0161.812] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0161.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0161.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0161.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.EnyBenied", lpFilePart=0x0) returned 0x75 [0161.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0161.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0161.813] GetFileType (hFile=0x238) returned 0x1 [0161.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0161.814] GetFileType (hFile=0x238) returned 0x1 [0162.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0162.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0162.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0162.210] GetFileType (hFile=0x23c) returned 0x1 [0162.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0162.210] GetFileType (hFile=0x23c) returned 0x1 [0162.210] ReadFile (in: hFile=0x23c, lpBuffer=0x26bf930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x26bf930*, lpNumberOfBytesRead=0x1adb08*=0x344, lpOverlapped=0x0) returned 1 [0162.229] ReadFile (in: hFile=0x23c, lpBuffer=0x26bf930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x26bf930*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0162.229] CloseHandle (hObject=0x23c) returned 1 [0162.229] WriteFile (in: hFile=0x238, lpBuffer=0x26bde78*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x26bde78*, lpNumberOfBytesWritten=0x1ad9d8*=0x370, lpOverlapped=0x0) returned 1 [0162.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x1ad600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0162.230] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml")) returned 1 [0162.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0162.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0162.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.233] GetFileType (hFile=0x238) returned 0x1 [0162.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0162.233] GetFileType (hFile=0x238) returned 0x1 [0162.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0162.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0162.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.236] GetFileType (hFile=0x238) returned 0x1 [0162.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0162.236] GetFileType (hFile=0x238) returned 0x1 [0162.236] WriteFile (in: hFile=0x238, lpBuffer=0x26cb3b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x26cb3b0*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0162.237] CloseHandle (hObject=0x238) returned 1 [0162.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0162.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0162.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.585] GetFileType (hFile=0x238) returned 0x1 [0162.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0162.585] GetFileType (hFile=0x238) returned 0x1 [0162.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5f [0162.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.587] GetFileType (hFile=0x238) returned 0x1 [0162.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.587] GetFileType (hFile=0x238) returned 0x1 [0162.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.png", lpFilePart=0x0) returned 0x5f [0162.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0162.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.591] GetFileType (hFile=0x238) returned 0x1 [0162.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0162.591] GetFileType (hFile=0x238) returned 0x1 [0162.591] WriteFile (in: hFile=0x238, lpBuffer=0x26dd650*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26dd650*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0162.592] CloseHandle (hObject=0x238) returned 1 [0162.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8a [0162.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.593] GetFileType (hFile=0x238) returned 0x1 [0162.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.593] GetFileType (hFile=0x238) returned 0x1 [0162.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x53 [0162.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", lpFilePart=0x0) returned 0x54 [0162.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0162.595] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.595] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0162.595] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0162.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0162.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x53 [0162.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", lpFilePart=0x0) returned 0x54 [0162.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0162.596] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.596] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0162.596] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0162.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0162.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5f [0162.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.597] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.597] GetFileType (hFile=0x238) returned 0x1 [0162.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.597] GetFileType (hFile=0x238) returned 0x1 [0162.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\ENYBENY.png", lpFilePart=0x0) returned 0x5f [0162.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0162.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.599] GetFileType (hFile=0x238) returned 0x1 [0162.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0162.599] GetFileType (hFile=0x238) returned 0x1 [0162.600] WriteFile (in: hFile=0x238, lpBuffer=0x26f1c78*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26f1c78*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0162.601] CloseHandle (hObject=0x238) returned 1 [0162.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8a [0162.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.602] GetFileType (hFile=0x238) returned 0x1 [0162.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.602] GetFileType (hFile=0x238) returned 0x1 [0162.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\ENYBENY.TXT", lpFilePart=0x0) returned 0x56 [0162.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0162.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.604] GetFileType (hFile=0x238) returned 0x1 [0162.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0162.604] GetFileType (hFile=0x238) returned 0x1 [0162.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\ENYBENY.png", lpFilePart=0x0) returned 0x56 [0162.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0162.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.608] GetFileType (hFile=0x238) returned 0x1 [0162.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0162.609] GetFileType (hFile=0x238) returned 0x1 [0162.609] WriteFile (in: hFile=0x238, lpBuffer=0x2703eb0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2703eb0*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0162.610] CloseHandle (hObject=0x238) returned 1 [0162.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x81 [0162.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0162.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.665] GetFileType (hFile=0x238) returned 0x1 [0162.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0162.665] GetFileType (hFile=0x238) returned 0x1 [0162.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\ENYBENY.TXT", lpFilePart=0x0) returned 0x44 [0162.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0162.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.667] GetFileType (hFile=0x238) returned 0x1 [0162.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0162.667] GetFileType (hFile=0x238) returned 0x1 [0162.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0162.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.669] GetFileType (hFile=0x238) returned 0x1 [0162.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0162.669] GetFileType (hFile=0x238) returned 0x1 [0162.669] WriteFile (in: hFile=0x238, lpBuffer=0x2716058*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x2716058*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0162.670] CloseHandle (hObject=0x238) returned 1 [0162.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6f [0162.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0162.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.671] GetFileType (hFile=0x238) returned 0x1 [0162.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0162.671] GetFileType (hFile=0x238) returned 0x1 [0162.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0162.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x32 [0162.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", lpFilePart=0x0) returned 0x33 [0162.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0162.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0162.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0162.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0162.674] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0162.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0162.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0162.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x32 [0162.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", lpFilePart=0x0) returned 0x33 [0162.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0162.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0162.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0162.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0162.675] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0162.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0162.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0162.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x37 [0162.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", lpFilePart=0x0) returned 0x38 [0162.676] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0162.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0162.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0162.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0162.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0162.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0162.677] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0162.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0162.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0162.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x37 [0162.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", lpFilePart=0x0) returned 0x38 [0162.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0162.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0162.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0162.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0162.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0162.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0162.679] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0162.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0162.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", lpFilePart=0x0) returned 0x3a [0162.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", lpFilePart=0x0) returned 0x3b [0162.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0162.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0162.680] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0162.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0162.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", lpFilePart=0x0) returned 0x3a [0162.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", lpFilePart=0x0) returned 0x3b [0162.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0162.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0162.681] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0162.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0162.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\ENYBENY.TXT", lpFilePart=0x0) returned 0x46 [0162.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.683] GetFileType (hFile=0x238) returned 0x1 [0162.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.683] GetFileType (hFile=0x238) returned 0x1 [0162.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\ENYBENY.png", lpFilePart=0x0) returned 0x46 [0162.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0162.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.685] GetFileType (hFile=0x238) returned 0x1 [0162.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0162.685] GetFileType (hFile=0x238) returned 0x1 [0162.685] WriteFile (in: hFile=0x238, lpBuffer=0x272f168*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x272f168*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0162.686] CloseHandle (hObject=0x238) returned 1 [0162.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x71 [0162.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.701] GetFileType (hFile=0x238) returned 0x1 [0162.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.701] GetFileType (hFile=0x238) returned 0x1 [0162.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x42 [0162.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", lpFilePart=0x0) returned 0x43 [0162.702] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0162.703] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.703] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.704] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.704] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.704] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0162.704] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0162.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0162.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x42 [0162.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", lpFilePart=0x0) returned 0x43 [0162.704] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0162.705] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.705] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.705] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.705] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.705] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0162.705] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0162.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0162.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0162.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x4b [0162.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", lpFilePart=0x0) returned 0x4c [0162.706] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0162.707] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0162.707] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0162.707] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0162.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0162.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0162.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x4b [0162.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", lpFilePart=0x0) returned 0x4c [0162.707] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0162.707] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0162.708] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0162.708] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0162.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0162.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\ENYBENY.TXT", lpFilePart=0x0) returned 0x57 [0162.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0162.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.709] GetFileType (hFile=0x238) returned 0x1 [0162.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0162.709] GetFileType (hFile=0x238) returned 0x1 [0162.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\ENYBENY.png", lpFilePart=0x0) returned 0x57 [0162.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0162.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.711] GetFileType (hFile=0x238) returned 0x1 [0162.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0162.712] GetFileType (hFile=0x238) returned 0x1 [0162.712] WriteFile (in: hFile=0x238, lpBuffer=0x2746248*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2746248*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0162.714] CloseHandle (hObject=0x238) returned 1 [0162.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x82 [0162.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0162.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.715] GetFileType (hFile=0x238) returned 0x1 [0162.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0162.715] GetFileType (hFile=0x238) returned 0x1 [0162.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0162.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", lpFilePart=0x0) returned 0x46 [0162.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", lpFilePart=0x0) returned 0x47 [0162.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0162.717] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0162.717] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0162.717] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0162.717] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0162.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0162.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0162.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", lpFilePart=0x0) returned 0x46 [0162.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", lpFilePart=0x0) returned 0x47 [0162.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0162.718] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0162.718] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0162.718] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0162.718] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0162.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0162.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0162.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", lpFilePart=0x0) returned 0x49 [0162.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", lpFilePart=0x0) returned 0x4a [0162.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0162.719] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0162.719] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0162.719] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0162.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0162.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0162.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", lpFilePart=0x0) returned 0x49 [0162.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", lpFilePart=0x0) returned 0x4a [0162.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0162.720] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0162.720] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0162.720] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0162.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0162.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\ENYBENY.TXT", lpFilePart=0x0) returned 0x55 [0162.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0162.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0162.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\ENYBENY.png", lpFilePart=0x0) returned 0x55 [0162.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0162.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0162.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x80 [0162.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0162.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0162.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\ENYBENY.TXT", lpFilePart=0x0) returned 0x52 [0162.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0162.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0162.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\ENYBENY.png", lpFilePart=0x0) returned 0x52 [0162.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0162.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0162.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7d [0162.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0162.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0162.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4e [0162.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\ENYBENY.png", lpFilePart=0x0) returned 0x4e [0162.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0162.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0162.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x79 [0162.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", lpFilePart=0x0) returned 0x43 [0162.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", lpFilePart=0x0) returned 0x44 [0162.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0162.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.795] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0162.795] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0162.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0162.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0162.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", lpFilePart=0x0) returned 0x43 [0162.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", lpFilePart=0x0) returned 0x44 [0162.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0162.796] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.796] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.796] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0162.796] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0162.797] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0162.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0162.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0162.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4f [0162.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0162.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0162.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\ENYBENY.png", lpFilePart=0x0) returned 0x4f [0162.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0162.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0162.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0162.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7a [0162.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0162.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0163.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0163.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\ENYBENY.TXT", lpFilePart=0x0) returned 0x43 [0163.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0163.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0163.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0163.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\ENYBENY.png", lpFilePart=0x0) returned 0x43 [0163.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0163.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0164.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0164.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6e [0164.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0164.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0164.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0164.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3e [0164.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0164.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0164.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0164.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\ENYBENY.png", lpFilePart=0x0) returned 0x3e [0164.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0164.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0164.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0164.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x69 [0164.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0164.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0164.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0164.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3a [0164.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0164.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0164.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0164.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\ENYBENY.png", lpFilePart=0x0) returned 0x3a [0164.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0164.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0164.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0164.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x65 [0164.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0164.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0164.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0164.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0164.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0164.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x2e [0164.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0164.458] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.458] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.458] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.458] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.458] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.458] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.458] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.459] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.459] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.459] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.459] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.459] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.459] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.459] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.460] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.460] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.460] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.460] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.460] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.460] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.460] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.461] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.461] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.461] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.461] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.461] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.461] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.461] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.462] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.462] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.462] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.462] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.462] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.462] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.463] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.464] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0164.464] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0164.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0164.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0164.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0164.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0164.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x2e [0164.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0164.465] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.465] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.465] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.465] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.466] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.467] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.467] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.467] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.467] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.467] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.467] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.467] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.468] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.469] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.469] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.469] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.469] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.469] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.469] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.469] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.470] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.470] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.470] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.470] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.470] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.470] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.471] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.471] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.471] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.471] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.471] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.471] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.472] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.472] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0164.472] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0164.472] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0164.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0164.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0164.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx.EnyBenied", lpFilePart=0x0) returned 0x44 [0164.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0164.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\3xksq3z.pptx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0164.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0164.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx", lpFilePart=0x0) returned 0x3a [0164.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0164.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\3xksq3z.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0164.912] GetFileType (hFile=0x23c) returned 0x1 [0164.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0164.912] GetFileType (hFile=0x23c) returned 0x1 [0164.912] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.917] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.918] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.918] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.918] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.918] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.918] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.919] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.919] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.919] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.919] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.920] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0164.920] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x7fb, lpOverlapped=0x0) returned 1 [0164.920] ReadFile (in: hFile=0x23c, lpBuffer=0x2727dfb, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727dfb*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0164.920] ReadFile (in: hFile=0x23c, lpBuffer=0x2727e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2727e18*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0164.920] CloseHandle (hObject=0x23c) returned 1 [0164.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx", lpFilePart=0x0) returned 0x3a [0164.920] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\3xKSQ3z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\3xksq3z.pptx")) returned 1 [0164.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg.EnyBenied", lpFilePart=0x0) returned 0x45 [0164.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0164.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5 imv zor.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0164.929] GetFileType (hFile=0x238) returned 0x1 [0164.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0164.929] GetFileType (hFile=0x238) returned 0x1 [0165.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg", lpFilePart=0x0) returned 0x3b [0165.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0165.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5 imv zor.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0165.261] GetFileType (hFile=0x23c) returned 0x1 [0165.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0165.261] GetFileType (hFile=0x23c) returned 0x1 [0165.261] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.267] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.267] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.268] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.268] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.268] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.269] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.269] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.269] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.269] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.270] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.270] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.270] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.270] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.271] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.271] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.271] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.272] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.272] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.272] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.272] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x38b, lpOverlapped=0x0) returned 1 [0165.272] ReadFile (in: hFile=0x23c, lpBuffer=0x267bd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267bd10*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0165.273] CloseHandle (hObject=0x23c) returned 1 [0165.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg", lpFilePart=0x0) returned 0x3b [0165.273] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5 iMv zOR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5 imv zor.jpg")) returned 1 [0165.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg.EnyBenied", lpFilePart=0x0) returned 0x49 [0165.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0165.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6q4z_iveu6wo5.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0165.277] GetFileType (hFile=0x238) returned 0x1 [0165.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0165.277] GetFileType (hFile=0x238) returned 0x1 [0165.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg", lpFilePart=0x0) returned 0x3f [0165.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0165.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6q4z_iveu6wo5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0165.612] GetFileType (hFile=0x23c) returned 0x1 [0165.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0165.612] GetFileType (hFile=0x23c) returned 0x1 [0165.612] ReadFile (in: hFile=0x23c, lpBuffer=0x27d7a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d7a78*, lpNumberOfBytesRead=0x1add08*=0xe63, lpOverlapped=0x0) returned 1 [0165.615] ReadFile (in: hFile=0x23c, lpBuffer=0x27d78c3, nNumberOfBytesToRead=0x19d, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d78c3*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0165.615] ReadFile (in: hFile=0x23c, lpBuffer=0x27d7a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d7a78*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0165.615] CloseHandle (hObject=0x23c) returned 1 [0165.615] WriteFile (in: hFile=0x238, lpBuffer=0x27d6010*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x27d6010*, lpNumberOfBytesWritten=0x1adbd8*=0xe90, lpOverlapped=0x0) returned 1 [0165.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg", lpFilePart=0x0) returned 0x3f [0165.616] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6q4Z_iveu6wo5.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6q4z_iveu6wo5.jpg")) returned 1 [0165.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg.EnyBenied", lpFilePart=0x0) returned 0x4c [0165.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0165.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\babhod5mvmjd90sa.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0165.619] GetFileType (hFile=0x238) returned 0x1 [0165.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0165.619] GetFileType (hFile=0x238) returned 0x1 [0165.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg", lpFilePart=0x0) returned 0x42 [0165.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0165.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\babhod5mvmjd90sa.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0165.959] GetFileType (hFile=0x23c) returned 0x1 [0165.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0165.959] GetFileType (hFile=0x23c) returned 0x1 [0165.959] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.964] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.964] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.964] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.964] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.964] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.965] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.965] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.965] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.965] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.965] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.966] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.966] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.966] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.966] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.966] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.967] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0165.967] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0xcd9, lpOverlapped=0x0) returned 1 [0165.967] ReadFile (in: hFile=0x23c, lpBuffer=0x271f941, nNumberOfBytesToRead=0x327, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271f941*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0165.967] ReadFile (in: hFile=0x23c, lpBuffer=0x271fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x271fc80*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0165.967] CloseHandle (hObject=0x23c) returned 1 [0165.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg", lpFilePart=0x0) returned 0x42 [0165.967] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BaBhOD5mVMjD90sa.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\babhod5mvmjd90sa.jpg")) returned 1 [0165.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png.EnyBenied", lpFilePart=0x0) returned 0x4a [0165.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0165.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ep5cd1-bht2xtj.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0165.970] GetFileType (hFile=0x238) returned 0x1 [0165.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0165.970] GetFileType (hFile=0x238) returned 0x1 [0166.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png", lpFilePart=0x0) returned 0x40 [0166.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0166.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ep5cd1-bht2xtj.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0166.322] GetFileType (hFile=0x23c) returned 0x1 [0166.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0166.322] GetFileType (hFile=0x23c) returned 0x1 [0166.322] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.327] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.327] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.328] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.328] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.328] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.328] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.328] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.329] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.329] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.329] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.329] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.329] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.330] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.330] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.330] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.330] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.330] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.331] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.331] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.331] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.331] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.331] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.332] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0xe2a, lpOverlapped=0x0) returned 1 [0166.332] ReadFile (in: hFile=0x23c, lpBuffer=0x267910a, nNumberOfBytesToRead=0x1d6, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x267910a*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0166.332] ReadFile (in: hFile=0x23c, lpBuffer=0x26792f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26792f8*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0166.332] CloseHandle (hObject=0x23c) returned 1 [0166.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png", lpFilePart=0x0) returned 0x40 [0166.332] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EP5CD1-BHt2XtJ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ep5cd1-bht2xtj.png")) returned 1 [0166.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4.EnyBenied", lpFilePart=0x0) returned 0x50 [0166.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0166.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\g-zqwcciqoab5f-se11g.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0166.336] GetFileType (hFile=0x238) returned 0x1 [0166.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0166.336] GetFileType (hFile=0x238) returned 0x1 [0166.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4", lpFilePart=0x0) returned 0x46 [0166.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0166.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\g-zqwcciqoab5f-se11g.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0166.737] GetFileType (hFile=0x23c) returned 0x1 [0166.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0166.737] GetFileType (hFile=0x23c) returned 0x1 [0166.737] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.742] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.742] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.743] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.743] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.743] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.743] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.743] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.744] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.744] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.744] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.744] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.744] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.745] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.745] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.745] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.745] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.746] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.746] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.746] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.746] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.746] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0166.747] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x76a, lpOverlapped=0x0) returned 1 [0166.747] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8bfa, nNumberOfBytesToRead=0x96, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8bfa*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0166.747] ReadFile (in: hFile=0x23c, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0166.747] CloseHandle (hObject=0x23c) returned 1 [0166.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4", lpFilePart=0x0) returned 0x46 [0166.747] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\g-zqWCcIQOAb5f-se11G.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\g-zqwcciqoab5f-se11g.mp4")) returned 1 [0166.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt.EnyBenied", lpFilePart=0x0) returned 0x4e [0166.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0166.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\gytwm3wayspzwjvzqu.odt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0166.754] GetFileType (hFile=0x238) returned 0x1 [0166.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0166.755] GetFileType (hFile=0x238) returned 0x1 [0167.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt", lpFilePart=0x0) returned 0x44 [0167.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0167.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\gytwm3wayspzwjvzqu.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0167.082] GetFileType (hFile=0x23c) returned 0x1 [0167.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0167.082] GetFileType (hFile=0x23c) returned 0x1 [0167.082] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.087] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.087] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.087] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.088] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.088] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.088] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.088] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.088] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.089] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.089] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.089] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.089] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.089] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.090] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.090] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.090] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.090] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.090] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.091] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.091] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.091] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0xe76, lpOverlapped=0x0) returned 1 [0167.091] ReadFile (in: hFile=0x23c, lpBuffer=0x2736de6, nNumberOfBytesToRead=0x18a, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736de6*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0167.091] ReadFile (in: hFile=0x23c, lpBuffer=0x2736f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2736f88*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0167.091] CloseHandle (hObject=0x23c) returned 1 [0167.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt", lpFilePart=0x0) returned 0x44 [0167.092] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\gYTWM3WaYspzWJvZqU.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\gytwm3wayspzwjvzqu.odt")) returned 1 [0167.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4.EnyBenied", lpFilePart=0x0) returned 0x43 [0167.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0167.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h67hldz.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0167.095] GetFileType (hFile=0x238) returned 0x1 [0167.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0167.095] GetFileType (hFile=0x238) returned 0x1 [0167.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4", lpFilePart=0x0) returned 0x39 [0167.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0167.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h67hldz.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0167.439] GetFileType (hFile=0x23c) returned 0x1 [0167.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0167.439] GetFileType (hFile=0x23c) returned 0x1 [0167.439] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.444] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.444] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.445] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.445] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.445] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.445] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.445] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.446] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.446] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.446] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.446] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x145, lpOverlapped=0x0) returned 1 [0167.446] ReadFile (in: hFile=0x23c, lpBuffer=0x26948a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26948a8*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0167.446] CloseHandle (hObject=0x23c) returned 1 [0167.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4", lpFilePart=0x0) returned 0x39 [0167.447] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\H67HlDZ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h67hldz.mp4")) returned 1 [0167.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4.EnyBenied", lpFilePart=0x0) returned 0x49 [0167.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0167.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\i_uslzhf81hvb.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0167.449] GetFileType (hFile=0x238) returned 0x1 [0167.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0167.449] GetFileType (hFile=0x238) returned 0x1 [0167.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4", lpFilePart=0x0) returned 0x3f [0167.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0167.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\i_uslzhf81hvb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0167.758] GetFileType (hFile=0x23c) returned 0x1 [0167.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0167.758] GetFileType (hFile=0x23c) returned 0x1 [0167.758] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.768] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.769] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.769] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.769] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.769] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.770] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.770] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.770] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.770] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.770] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.771] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.771] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.771] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.771] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.771] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.772] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.772] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.772] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.772] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0167.772] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x11f, lpOverlapped=0x0) returned 1 [0167.772] ReadFile (in: hFile=0x23c, lpBuffer=0x27e7018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e7018*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0167.773] CloseHandle (hObject=0x23c) returned 1 [0167.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4", lpFilePart=0x0) returned 0x3f [0167.773] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\i_uSlZhF81hvB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\i_uslzhf81hvb.mp4")) returned 1 [0167.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt.EnyBenied", lpFilePart=0x0) returned 0x42 [0167.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0167.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k4j96t.ppt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0167.776] GetFileType (hFile=0x238) returned 0x1 [0167.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0167.776] GetFileType (hFile=0x238) returned 0x1 [0168.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt", lpFilePart=0x0) returned 0x38 [0168.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0168.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k4j96t.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0168.108] GetFileType (hFile=0x23c) returned 0x1 [0168.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0168.108] GetFileType (hFile=0x23c) returned 0x1 [0168.108] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.113] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.113] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.113] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.114] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.114] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.114] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.114] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.114] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.115] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.115] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x351, lpOverlapped=0x0) returned 1 [0168.115] ReadFile (in: hFile=0x23c, lpBuffer=0x2742b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2742b00*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0168.115] CloseHandle (hObject=0x23c) returned 1 [0168.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt", lpFilePart=0x0) returned 0x38 [0168.115] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\K4j96T.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\k4j96t.ppt")) returned 1 [0168.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg.EnyBenied", lpFilePart=0x0) returned 0x45 [0168.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0168.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\krqcqyqge.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0168.118] GetFileType (hFile=0x238) returned 0x1 [0168.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0168.118] GetFileType (hFile=0x238) returned 0x1 [0168.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg", lpFilePart=0x0) returned 0x3b [0168.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0168.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\krqcqyqge.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0168.505] GetFileType (hFile=0x23c) returned 0x1 [0168.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0168.506] GetFileType (hFile=0x23c) returned 0x1 [0168.506] ReadFile (in: hFile=0x23c, lpBuffer=0x2694480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2694480*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.511] ReadFile (in: hFile=0x23c, lpBuffer=0x2694480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2694480*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.514] ReadFile (in: hFile=0x23c, lpBuffer=0x2694480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2694480*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.515] ReadFile (in: hFile=0x23c, lpBuffer=0x2694480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2694480*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.515] ReadFile (in: hFile=0x23c, lpBuffer=0x2694480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2694480*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.515] ReadFile (in: hFile=0x23c, lpBuffer=0x2694480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2694480*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.515] ReadFile (in: hFile=0x23c, lpBuffer=0x2694480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2694480*, lpNumberOfBytesRead=0x1add08*=0x41, lpOverlapped=0x0) returned 1 [0168.515] ReadFile (in: hFile=0x23c, lpBuffer=0x2694480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2694480*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0168.515] CloseHandle (hObject=0x23c) returned 1 [0168.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg", lpFilePart=0x0) returned 0x3b [0168.516] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kRQCqYQgE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\krqcqyqge.jpg")) returned 1 [0168.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf.EnyBenied", lpFilePart=0x0) returned 0x40 [0168.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0168.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lctd.pdf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0168.518] GetFileType (hFile=0x238) returned 0x1 [0168.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0168.519] GetFileType (hFile=0x238) returned 0x1 [0168.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf", lpFilePart=0x0) returned 0x36 [0168.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0168.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lctd.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0168.872] GetFileType (hFile=0x23c) returned 0x1 [0168.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0168.872] GetFileType (hFile=0x23c) returned 0x1 [0168.872] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.876] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.878] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.879] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.879] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.879] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.879] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.880] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.880] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.880] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.880] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.880] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.881] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.881] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0168.881] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0xd21, lpOverlapped=0x0) returned 1 [0168.881] ReadFile (in: hFile=0x23c, lpBuffer=0x27e15a1, nNumberOfBytesToRead=0x2df, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e15a1*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0168.881] ReadFile (in: hFile=0x23c, lpBuffer=0x27e1898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e1898*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0168.881] CloseHandle (hObject=0x23c) returned 1 [0168.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf", lpFilePart=0x0) returned 0x36 [0168.882] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LctD.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lctd.pdf")) returned 1 [0168.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf.EnyBenied", lpFilePart=0x0) returned 0x43 [0168.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0168.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mmqfyf6.rtf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0168.885] GetFileType (hFile=0x238) returned 0x1 [0168.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0168.886] GetFileType (hFile=0x238) returned 0x1 [0169.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf", lpFilePart=0x0) returned 0x39 [0169.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0169.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mmqfyf6.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x23c [0169.231] GetFileType (hFile=0x23c) returned 0x1 [0169.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0169.231] GetFileType (hFile=0x23c) returned 0x1 [0169.231] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.236] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.236] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.236] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.237] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.237] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.237] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.238] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.238] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.238] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.238] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.238] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.239] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.239] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.239] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.239] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.239] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.240] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.240] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.240] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.240] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.240] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.241] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.241] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0169.241] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0xdca, lpOverlapped=0x0) returned 1 [0169.241] ReadFile (in: hFile=0x23c, lpBuffer=0x27376fa, nNumberOfBytesToRead=0x236, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27376fa*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0169.241] ReadFile (in: hFile=0x23c, lpBuffer=0x2737948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2737948*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0169.241] CloseHandle (hObject=0x23c) returned 1 [0169.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf", lpFilePart=0x0) returned 0x39 [0169.242] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\MMQFYF6.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mmqfyf6.rtf")) returned 1 [0169.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4.EnyBenied", lpFilePart=0x0) returned 0x40 [0169.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0169.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pjw1.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0169.245] GetFileType (hFile=0x238) returned 0x1 [0169.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0169.245] GetFileType (hFile=0x238) returned 0x1 [0169.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4", lpFilePart=0x0) returned 0x36 [0169.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0169.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pjw1.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0169.809] GetFileType (hFile=0x228) returned 0x1 [0169.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0169.809] GetFileType (hFile=0x228) returned 0x1 [0169.810] ReadFile (in: hFile=0x228, lpBuffer=0x266c700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x266c700*, lpNumberOfBytesRead=0x1add08*=0xc29, lpOverlapped=0x0) returned 1 [0169.814] ReadFile (in: hFile=0x228, lpBuffer=0x266c311, nNumberOfBytesToRead=0x3d7, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x266c311*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0169.814] ReadFile (in: hFile=0x228, lpBuffer=0x266c700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x266c700*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0169.814] CloseHandle (hObject=0x228) returned 1 [0169.815] WriteFile (in: hFile=0x238, lpBuffer=0x266acb8*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x266acb8*, lpNumberOfBytesWritten=0x1adbd8*=0xc50, lpOverlapped=0x0) returned 1 [0169.816] CloseHandle (hObject=0x238) returned 1 [0169.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4", lpFilePart=0x0) returned 0x36 [0169.816] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pJw1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pjw1.mp4")) returned 1 [0169.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi.EnyBenied", lpFilePart=0x0) returned 0x4d [0169.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0169.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q0zdglqphe crqke1.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0169.820] GetFileType (hFile=0x238) returned 0x1 [0169.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0169.820] GetFileType (hFile=0x238) returned 0x1 [0170.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi", lpFilePart=0x0) returned 0x43 [0170.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0170.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q0zdglqphe crqke1.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0170.498] GetFileType (hFile=0x228) returned 0x1 [0170.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0170.498] GetFileType (hFile=0x228) returned 0x1 [0170.498] ReadFile (in: hFile=0x228, lpBuffer=0x27b4580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b4580*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.503] ReadFile (in: hFile=0x228, lpBuffer=0x27b4580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b4580*, lpNumberOfBytesRead=0x1add08*=0xf84, lpOverlapped=0x0) returned 1 [0170.504] ReadFile (in: hFile=0x228, lpBuffer=0x27b44ec, nNumberOfBytesToRead=0x7c, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b44ec*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0170.504] ReadFile (in: hFile=0x228, lpBuffer=0x27b4580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b4580*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0170.504] CloseHandle (hObject=0x228) returned 1 [0170.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi", lpFilePart=0x0) returned 0x43 [0170.504] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q0ZdglQphe crQKE1.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q0zdglqphe crqke1.avi")) returned 1 [0170.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx.EnyBenied", lpFilePart=0x0) returned 0x44 [0170.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0170.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qrkmstv.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0170.506] GetFileType (hFile=0x238) returned 0x1 [0170.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0170.506] GetFileType (hFile=0x238) returned 0x1 [0170.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx", lpFilePart=0x0) returned 0x3a [0170.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0170.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qrkmstv.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0170.869] GetFileType (hFile=0x228) returned 0x1 [0170.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0170.869] GetFileType (hFile=0x228) returned 0x1 [0170.869] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.874] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.875] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.875] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.875] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.875] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.875] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.876] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.876] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.876] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.876] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.876] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.877] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.877] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.877] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.877] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.877] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.878] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.878] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0170.878] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x44b, lpOverlapped=0x0) returned 1 [0170.878] ReadFile (in: hFile=0x228, lpBuffer=0x26fd45b, nNumberOfBytesToRead=0x3b5, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd45b*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0170.878] ReadFile (in: hFile=0x228, lpBuffer=0x26fd828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0170.878] CloseHandle (hObject=0x228) returned 1 [0170.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx", lpFilePart=0x0) returned 0x3a [0170.879] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qrKmStv.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qrkmstv.xlsx")) returned 1 [0170.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png.EnyBenied", lpFilePart=0x0) returned 0x49 [0170.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0170.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tzd0gjsdxjzhi.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0170.881] GetFileType (hFile=0x238) returned 0x1 [0170.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0170.882] GetFileType (hFile=0x238) returned 0x1 [0171.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png", lpFilePart=0x0) returned 0x3f [0171.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0171.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tzd0gjsdxjzhi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0171.314] GetFileType (hFile=0x228) returned 0x1 [0171.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0171.314] GetFileType (hFile=0x228) returned 0x1 [0171.314] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.321] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.321] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.321] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.322] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.322] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.322] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.323] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.323] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.323] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x843, lpOverlapped=0x0) returned 1 [0171.323] ReadFile (in: hFile=0x228, lpBuffer=0x26582f3, nNumberOfBytesToRead=0x3bd, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26582f3*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0171.324] ReadFile (in: hFile=0x228, lpBuffer=0x26586c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26586c8*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0171.324] CloseHandle (hObject=0x228) returned 1 [0171.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png", lpFilePart=0x0) returned 0x3f [0171.324] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tzd0GJSdxJzHI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tzd0gjsdxjzhi.png")) returned 1 [0171.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt.EnyBenied", lpFilePart=0x0) returned 0x4b [0171.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0171.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vgqnk_70 zw2j0t.odt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0171.328] GetFileType (hFile=0x238) returned 0x1 [0171.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0171.328] GetFileType (hFile=0x238) returned 0x1 [0171.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt", lpFilePart=0x0) returned 0x41 [0171.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0171.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vgqnk_70 zw2j0t.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0171.871] GetFileType (hFile=0x228) returned 0x1 [0171.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0171.871] GetFileType (hFile=0x228) returned 0x1 [0171.871] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.878] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.878] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.878] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.879] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.879] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.879] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.880] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.880] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.880] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.881] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.881] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0171.881] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x7f4, lpOverlapped=0x0) returned 1 [0171.882] ReadFile (in: hFile=0x228, lpBuffer=0x27a94e4, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a94e4*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0171.882] ReadFile (in: hFile=0x228, lpBuffer=0x27a9508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0171.882] CloseHandle (hObject=0x228) returned 1 [0171.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt", lpFilePart=0x0) returned 0x41 [0171.882] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Vgqnk_70 zW2j0T.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vgqnk_70 zw2j0t.odt")) returned 1 [0171.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi.EnyBenied", lpFilePart=0x0) returned 0x4a [0171.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0171.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xgjjtawuycwlrn.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0171.886] GetFileType (hFile=0x238) returned 0x1 [0171.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0171.886] GetFileType (hFile=0x238) returned 0x1 [0172.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi", lpFilePart=0x0) returned 0x40 [0172.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0172.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xgjjtawuycwlrn.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0172.335] GetFileType (hFile=0x228) returned 0x1 [0172.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0172.336] GetFileType (hFile=0x228) returned 0x1 [0172.336] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.340] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.341] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.341] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.341] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.341] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.342] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.342] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.342] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.342] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.342] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.343] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.343] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.343] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x152, lpOverlapped=0x0) returned 1 [0172.343] ReadFile (in: hFile=0x228, lpBuffer=0x26fd478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26fd478*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0172.343] CloseHandle (hObject=0x228) returned 1 [0172.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi", lpFilePart=0x0) returned 0x40 [0172.343] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XgJJtAwuycwlRn.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xgjjtawuycwlrn.avi")) returned 1 [0172.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg.EnyBenied", lpFilePart=0x0) returned 0x4c [0172.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0172.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xvamor3nx4tojya9.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0172.346] GetFileType (hFile=0x238) returned 0x1 [0172.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0172.346] GetFileType (hFile=0x238) returned 0x1 [0172.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg", lpFilePart=0x0) returned 0x42 [0172.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0172.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xvamor3nx4tojya9.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0172.795] GetFileType (hFile=0x228) returned 0x1 [0172.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0172.795] GetFileType (hFile=0x228) returned 0x1 [0172.795] ReadFile (in: hFile=0x228, lpBuffer=0x2651d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2651d88*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0172.800] ReadFile (in: hFile=0x228, lpBuffer=0x2651d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2651d88*, lpNumberOfBytesRead=0x1add08*=0xfdb, lpOverlapped=0x0) returned 1 [0172.801] ReadFile (in: hFile=0x228, lpBuffer=0x2651d4b, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2651d4b*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0172.801] ReadFile (in: hFile=0x228, lpBuffer=0x2651d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2651d88*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0172.801] CloseHandle (hObject=0x228) returned 1 [0172.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg", lpFilePart=0x0) returned 0x42 [0172.801] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\XvAmor3Nx4TOJYA9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xvamor3nx4tojya9.jpg")) returned 1 [0172.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc.EnyBenied", lpFilePart=0x0) returned 0x44 [0172.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0172.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yu5j-ejh.doc.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0172.804] GetFileType (hFile=0x238) returned 0x1 [0172.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0172.804] GetFileType (hFile=0x238) returned 0x1 [0173.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc", lpFilePart=0x0) returned 0x3a [0173.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0173.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yu5j-ejh.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0173.279] GetFileType (hFile=0x228) returned 0x1 [0173.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0173.279] GetFileType (hFile=0x228) returned 0x1 [0173.279] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.284] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.285] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.285] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.285] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.286] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.286] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.286] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x573, lpOverlapped=0x0) returned 1 [0173.286] ReadFile (in: hFile=0x228, lpBuffer=0x279ada3, nNumberOfBytesToRead=0x28d, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279ada3*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0173.286] ReadFile (in: hFile=0x228, lpBuffer=0x279b048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x279b048*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0173.287] CloseHandle (hObject=0x228) returned 1 [0173.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc", lpFilePart=0x0) returned 0x3a [0173.287] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Yu5j-EJh.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yu5j-ejh.doc")) returned 1 [0173.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png.EnyBenied", lpFilePart=0x0) returned 0x45 [0173.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0173.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_ktngq-oc.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0173.290] GetFileType (hFile=0x238) returned 0x1 [0173.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0173.290] GetFileType (hFile=0x238) returned 0x1 [0173.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png", lpFilePart=0x0) returned 0x3b [0173.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0173.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_ktngq-oc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0173.680] GetFileType (hFile=0x228) returned 0x1 [0173.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0173.680] GetFileType (hFile=0x228) returned 0x1 [0173.680] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.685] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.686] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.686] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.686] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.686] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.687] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.687] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.687] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.688] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.688] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.688] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.688] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.688] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.689] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.689] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.689] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.689] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.689] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.690] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.690] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0173.690] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0xccc, lpOverlapped=0x0) returned 1 [0173.690] ReadFile (in: hFile=0x228, lpBuffer=0x26e97e4, nNumberOfBytesToRead=0x334, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e97e4*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0173.690] ReadFile (in: hFile=0x228, lpBuffer=0x26e9b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x26e9b30*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0173.690] CloseHandle (hObject=0x228) returned 1 [0173.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png", lpFilePart=0x0) returned 0x3b [0173.698] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\_KTngq-OC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_ktngq-oc.png")) returned 1 [0173.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0173.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x33 [0173.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x34 [0173.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0173.726] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.726] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.726] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.727] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.727] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.727] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.727] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0173.727] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0173.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0173.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0173.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x33 [0173.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x34 [0173.728] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0173.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0173.729] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0173.729] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0173.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0173.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0173.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3b [0173.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3c [0173.730] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0173.731] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0173.731] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0173.731] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0173.731] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0173.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0173.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0173.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3b [0173.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3c [0173.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0173.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0173.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0173.732] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0173.732] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0173.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0173.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0173.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x40 [0173.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x41 [0173.733] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0173.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.733] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0173.733] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0173.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0173.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0173.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x40 [0173.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x41 [0173.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0173.734] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.734] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.734] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.734] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.734] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0173.734] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0173.735] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0173.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0173.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0173.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", lpFilePart=0x0) returned 0x47 [0173.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", lpFilePart=0x0) returned 0x48 [0173.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0173.735] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.735] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0173.735] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0173.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0173.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0173.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", lpFilePart=0x0) returned 0x47 [0173.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", lpFilePart=0x0) returned 0x48 [0173.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0173.736] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.736] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0173.736] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0173.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0173.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\ENYBENY.TXT", lpFilePart=0x0) returned 0x53 [0173.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0173.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0173.737] GetFileType (hFile=0x238) returned 0x1 [0173.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0173.738] GetFileType (hFile=0x238) returned 0x1 [0173.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\ENYBENY.png", lpFilePart=0x0) returned 0x53 [0173.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0173.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0173.739] GetFileType (hFile=0x238) returned 0x1 [0173.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0173.739] GetFileType (hFile=0x238) returned 0x1 [0173.739] WriteFile (in: hFile=0x238, lpBuffer=0x2715a10*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2715a10*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0173.740] CloseHandle (hObject=0x238) returned 1 [0173.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7e [0173.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0173.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0173.741] GetFileType (hFile=0x238) returned 0x1 [0173.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0173.741] GetFileType (hFile=0x238) returned 0x1 [0173.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0173.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", lpFilePart=0x0) returned 0x46 [0173.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", lpFilePart=0x0) returned 0x47 [0173.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0173.742] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.742] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0173.742] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0173.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0173.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0173.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", lpFilePart=0x0) returned 0x46 [0173.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", lpFilePart=0x0) returned 0x47 [0173.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0173.743] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.743] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0173.743] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0173.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0173.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\ENYBENY.TXT", lpFilePart=0x0) returned 0x52 [0173.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0173.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0173.743] GetFileType (hFile=0x238) returned 0x1 [0173.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0173.743] GetFileType (hFile=0x238) returned 0x1 [0173.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\ENYBENY.png", lpFilePart=0x0) returned 0x52 [0173.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0173.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0173.745] GetFileType (hFile=0x238) returned 0x1 [0173.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0173.745] GetFileType (hFile=0x238) returned 0x1 [0173.745] WriteFile (in: hFile=0x238, lpBuffer=0x2729d18*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2729d18*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0173.746] CloseHandle (hObject=0x238) returned 1 [0173.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7d [0173.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0173.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0173.746] GetFileType (hFile=0x238) returned 0x1 [0173.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0173.746] GetFileType (hFile=0x238) returned 0x1 [0173.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0173.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", lpFilePart=0x0) returned 0x4c [0173.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", lpFilePart=0x0) returned 0x4d [0173.747] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0173.748] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.748] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.748] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.748] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0173.748] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0173.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0173.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0173.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", lpFilePart=0x0) returned 0x4c [0173.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", lpFilePart=0x0) returned 0x4d [0173.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0173.748] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.749] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.749] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0173.749] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0173.749] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0173.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0173.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0173.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.EnyBenied", lpFilePart=0x0) returned 0x5e [0173.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0173.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0173.750] GetFileType (hFile=0x238) returned 0x1 [0173.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0173.750] GetFileType (hFile=0x238) returned 0x1 [0174.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", lpFilePart=0x0) returned 0x54 [0174.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0174.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0174.096] GetFileType (hFile=0x228) returned 0x1 [0174.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0174.096] GetFileType (hFile=0x228) returned 0x1 [0174.096] ReadFile (in: hFile=0x228, lpBuffer=0x267b6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x267b6d0*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0174.097] CloseHandle (hObject=0x228) returned 1 [0174.097] WriteFile (in: hFile=0x238, lpBuffer=0x2679c50*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x2679c50*, lpNumberOfBytesWritten=0x1ad9d8*=0x30, lpOverlapped=0x0) returned 1 [0174.097] CloseHandle (hObject=0x238) returned 1 [0174.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", nBufferLength=0x105, lpBuffer=0x1ad600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", lpFilePart=0x0) returned 0x54 [0174.098] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js")) returned 1 [0174.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.EnyBenied", lpFilePart=0x0) returned 0x67 [0174.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0174.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0174.726] GetFileType (hFile=0x238) returned 0x1 [0174.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0174.726] GetFileType (hFile=0x238) returned 0x1 [0175.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", lpFilePart=0x0) returned 0x5d [0175.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0175.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0175.238] GetFileType (hFile=0x228) returned 0x1 [0175.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0175.238] GetFileType (hFile=0x228) returned 0x1 [0175.238] ReadFile (in: hFile=0x228, lpBuffer=0x27c29c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x27c29c8*, lpNumberOfBytesRead=0x1adb08*=0xa, lpOverlapped=0x0) returned 1 [0175.239] ReadFile (in: hFile=0x228, lpBuffer=0x27c29c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x27c29c8*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0175.239] CloseHandle (hObject=0x228) returned 1 [0175.239] WriteFile (in: hFile=0x238, lpBuffer=0x27c0f20*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x27c0f20*, lpNumberOfBytesWritten=0x1ad9d8*=0x30, lpOverlapped=0x0) returned 1 [0175.241] CloseHandle (hObject=0x238) returned 1 [0175.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", nBufferLength=0x105, lpBuffer=0x1ad600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", lpFilePart=0x0) returned 0x5d [0175.241] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js")) returned 1 [0175.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\ENYBENY.TXT", lpFilePart=0x0) returned 0x58 [0175.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0175.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.246] GetFileType (hFile=0x238) returned 0x1 [0175.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0175.246] GetFileType (hFile=0x238) returned 0x1 [0175.246] WriteFile (in: hFile=0x238, lpBuffer=0x27ccf88*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x27ccf88*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0175.247] CloseHandle (hObject=0x238) returned 1 [0175.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\ENYBENY.png", lpFilePart=0x0) returned 0x58 [0175.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0175.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0175.249] GetFileType (hFile=0x238) returned 0x1 [0175.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0175.249] GetFileType (hFile=0x238) returned 0x1 [0175.249] WriteFile (in: hFile=0x238, lpBuffer=0x27ce070*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x27ce070*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0175.250] CloseHandle (hObject=0x238) returned 1 [0175.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x83 [0175.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0175.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.251] GetFileType (hFile=0x238) returned 0x1 [0175.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0175.252] GetFileType (hFile=0x238) returned 0x1 [0175.252] WriteFile (in: hFile=0x238, lpBuffer=0x27d4d38*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x27d4d38*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0175.253] CloseHandle (hObject=0x238) returned 1 [0175.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0175.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", lpFilePart=0x0) returned 0x49 [0175.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", lpFilePart=0x0) returned 0x4a [0175.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0175.254] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0175.254] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0175.254] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0175.254] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0175.254] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0175.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0175.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0175.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", lpFilePart=0x0) returned 0x49 [0175.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", lpFilePart=0x0) returned 0x4a [0175.255] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0175.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0175.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0175.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0175.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0175.255] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0175.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0175.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0175.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", lpFilePart=0x0) returned 0x52 [0175.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", lpFilePart=0x0) returned 0x53 [0175.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0175.257] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0175.257] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0175.257] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0175.257] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0175.258] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0175.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0175.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0175.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", lpFilePart=0x0) returned 0x52 [0175.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", lpFilePart=0x0) returned 0x53 [0175.258] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0175.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0175.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0175.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0175.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0175.259] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0175.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0175.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5e [0175.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0175.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.264] GetFileType (hFile=0x238) returned 0x1 [0175.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0175.264] GetFileType (hFile=0x238) returned 0x1 [0175.264] WriteFile (in: hFile=0x238, lpBuffer=0x27e4e58*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x27e4e58*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0175.265] CloseHandle (hObject=0x238) returned 1 [0175.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\ENYBENY.png", lpFilePart=0x0) returned 0x5e [0175.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0175.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0175.267] GetFileType (hFile=0x238) returned 0x1 [0175.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0175.267] GetFileType (hFile=0x238) returned 0x1 [0175.267] WriteFile (in: hFile=0x238, lpBuffer=0x27e5f48*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x27e5f48*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0175.268] CloseHandle (hObject=0x238) returned 1 [0175.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x89 [0175.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0175.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.269] GetFileType (hFile=0x238) returned 0x1 [0175.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0175.270] GetFileType (hFile=0x238) returned 0x1 [0175.270] WriteFile (in: hFile=0x238, lpBuffer=0x27ecc38*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x27ecc38*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0175.271] CloseHandle (hObject=0x238) returned 1 [0175.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\ENYBENY.TXT", lpFilePart=0x0) returned 0x55 [0175.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0175.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.275] GetFileType (hFile=0x238) returned 0x1 [0175.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0175.275] GetFileType (hFile=0x238) returned 0x1 [0175.276] WriteFile (in: hFile=0x238, lpBuffer=0x25f8290*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x25f8290*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0175.277] CloseHandle (hObject=0x238) returned 1 [0175.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\ENYBENY.png", lpFilePart=0x0) returned 0x55 [0175.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0175.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0175.278] GetFileType (hFile=0x238) returned 0x1 [0175.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0175.278] GetFileType (hFile=0x238) returned 0x1 [0175.279] WriteFile (in: hFile=0x238, lpBuffer=0x25f9370*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x25f9370*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0175.280] CloseHandle (hObject=0x238) returned 1 [0175.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x80 [0175.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0175.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.283] GetFileType (hFile=0x238) returned 0x1 [0175.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0175.283] GetFileType (hFile=0x238) returned 0x1 [0175.283] WriteFile (in: hFile=0x238, lpBuffer=0x2600030*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2600030*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0175.285] CloseHandle (hObject=0x238) returned 1 [0175.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4c [0175.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0175.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.286] GetFileType (hFile=0x238) returned 0x1 [0175.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0175.287] GetFileType (hFile=0x238) returned 0x1 [0175.287] WriteFile (in: hFile=0x238, lpBuffer=0x260a478*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x260a478*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0175.288] CloseHandle (hObject=0x238) returned 1 [0175.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\ENYBENY.png", lpFilePart=0x0) returned 0x4c [0175.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0175.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0175.495] GetFileType (hFile=0x238) returned 0x1 [0175.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0175.496] GetFileType (hFile=0x238) returned 0x1 [0175.496] WriteFile (in: hFile=0x238, lpBuffer=0x260b548*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x260b548*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0175.497] CloseHandle (hObject=0x238) returned 1 [0175.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x77 [0175.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0175.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.499] GetFileType (hFile=0x238) returned 0x1 [0175.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0175.499] GetFileType (hFile=0x238) returned 0x1 [0175.499] WriteFile (in: hFile=0x238, lpBuffer=0x26121c8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26121c8*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0175.500] CloseHandle (hObject=0x238) returned 1 [0175.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\ENYBENY.TXT", lpFilePart=0x0) returned 0x47 [0175.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0175.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.502] GetFileType (hFile=0x238) returned 0x1 [0175.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0175.502] GetFileType (hFile=0x238) returned 0x1 [0175.502] WriteFile (in: hFile=0x238, lpBuffer=0x261c5f0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x261c5f0*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0175.503] CloseHandle (hObject=0x238) returned 1 [0175.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\ENYBENY.png", lpFilePart=0x0) returned 0x47 [0175.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0175.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0175.505] GetFileType (hFile=0x238) returned 0x1 [0175.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0175.505] GetFileType (hFile=0x238) returned 0x1 [0175.505] WriteFile (in: hFile=0x238, lpBuffer=0x261d6b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x261d6b0*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0175.506] CloseHandle (hObject=0x238) returned 1 [0175.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x72 [0175.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0175.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.508] GetFileType (hFile=0x238) returned 0x1 [0175.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0175.508] GetFileType (hFile=0x238) returned 0x1 [0175.508] WriteFile (in: hFile=0x238, lpBuffer=0x2624310*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2624310*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0175.510] CloseHandle (hObject=0x238) returned 1 [0175.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0175.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x40 [0175.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x41 [0175.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0175.520] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0175.520] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0175.521] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0175.521] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0175.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0175.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0175.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x40 [0175.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x41 [0175.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0175.522] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0175.522] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0175.522] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0175.522] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0175.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0175.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0175.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x4b [0175.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpFilePart=0x0) returned 0x4c [0175.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0175.523] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0175.523] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0175.523] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0175.524] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0175.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0175.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0175.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x4b [0175.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpFilePart=0x0) returned 0x4c [0175.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0175.524] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0175.525] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0175.525] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0175.525] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0175.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0175.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0175.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", lpFilePart=0x0) returned 0x54 [0175.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", lpFilePart=0x0) returned 0x55 [0175.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0175.723] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0175.723] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0175.724] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0175.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0175.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0175.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", lpFilePart=0x0) returned 0x54 [0175.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", lpFilePart=0x0) returned 0x55 [0175.724] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0175.724] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0175.724] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0175.725] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0175.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0175.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0175.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0175.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0175.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.729] GetFileType (hFile=0x238) returned 0x1 [0175.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0175.729] GetFileType (hFile=0x238) returned 0x1 [0175.730] WriteFile (in: hFile=0x238, lpBuffer=0x2635648*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2635648*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0175.731] CloseHandle (hObject=0x238) returned 1 [0175.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0175.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0175.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0175.733] GetFileType (hFile=0x238) returned 0x1 [0175.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0175.733] GetFileType (hFile=0x238) returned 0x1 [0175.733] WriteFile (in: hFile=0x238, lpBuffer=0x2636740*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2636740*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0175.735] CloseHandle (hObject=0x238) returned 1 [0175.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0175.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0175.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.737] GetFileType (hFile=0x238) returned 0x1 [0175.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0175.737] GetFileType (hFile=0x238) returned 0x1 [0175.737] WriteFile (in: hFile=0x238, lpBuffer=0x263d438*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x263d438*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0175.739] CloseHandle (hObject=0x238) returned 1 [0175.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\ENYBENY.TXT", lpFilePart=0x0) returned 0x57 [0175.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0175.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.742] GetFileType (hFile=0x238) returned 0x1 [0175.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0175.742] GetFileType (hFile=0x238) returned 0x1 [0175.743] WriteFile (in: hFile=0x238, lpBuffer=0x26478a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26478a0*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0175.744] CloseHandle (hObject=0x238) returned 1 [0175.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\ENYBENY.png", lpFilePart=0x0) returned 0x57 [0175.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0175.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0175.746] GetFileType (hFile=0x238) returned 0x1 [0175.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0175.746] GetFileType (hFile=0x238) returned 0x1 [0175.746] WriteFile (in: hFile=0x238, lpBuffer=0x2648980*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2648980*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0175.748] CloseHandle (hObject=0x238) returned 1 [0175.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x82 [0175.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0175.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.970] GetFileType (hFile=0x238) returned 0x1 [0175.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0175.970] GetFileType (hFile=0x238) returned 0x1 [0175.971] WriteFile (in: hFile=0x238, lpBuffer=0x264f640*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x264f640*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0175.972] CloseHandle (hObject=0x238) returned 1 [0175.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4c [0175.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0175.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0175.973] GetFileType (hFile=0x238) returned 0x1 [0175.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0175.973] GetFileType (hFile=0x238) returned 0x1 [0175.973] WriteFile (in: hFile=0x238, lpBuffer=0x2659a88*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2659a88*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0175.974] CloseHandle (hObject=0x238) returned 1 [0175.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\ENYBENY.png", lpFilePart=0x0) returned 0x4c [0175.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0175.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0175.976] GetFileType (hFile=0x238) returned 0x1 [0175.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0175.976] GetFileType (hFile=0x238) returned 0x1 [0175.976] WriteFile (in: hFile=0x238, lpBuffer=0x265ab58*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x265ab58*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0175.977] CloseHandle (hObject=0x238) returned 1 [0175.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x77 [0175.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0175.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.188] GetFileType (hFile=0x238) returned 0x1 [0176.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.188] GetFileType (hFile=0x238) returned 0x1 [0176.189] WriteFile (in: hFile=0x238, lpBuffer=0x26617d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26617d8*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0176.190] CloseHandle (hObject=0x238) returned 1 [0176.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x3e [0176.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", lpFilePart=0x0) returned 0x3f [0176.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.190] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.191] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x3e [0176.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", lpFilePart=0x0) returned 0x3f [0176.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.191] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.192] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.192] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0176.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0176.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0176.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0176.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0176.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0176.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0176.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x3f [0176.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x40 [0176.206] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.206] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.206] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.206] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.207] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x3f [0176.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x40 [0176.207] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.207] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.208] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.208] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.208] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0176.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4c [0176.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4d [0176.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0176.209] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.209] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0176.209] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0176.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0176.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0176.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4c [0176.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4d [0176.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0176.210] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.210] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0176.210] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0176.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0176.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.TXT", lpFilePart=0x0) returned 0x58 [0176.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0176.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0176.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.png", lpFilePart=0x0) returned 0x58 [0176.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0176.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0176.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x83 [0176.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0176.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0176.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0176.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0176.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0176.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0176.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0176.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0176.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0176.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x41 [0176.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpFilePart=0x0) returned 0x42 [0176.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.569] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.570] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.570] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x41 [0176.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpFilePart=0x0) returned 0x42 [0176.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.570] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.571] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.571] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4d [0176.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0176.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\ENYBENY.png", lpFilePart=0x0) returned 0x4d [0176.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0176.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0176.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x78 [0176.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0176.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3f [0176.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0176.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0176.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\ENYBENY.png", lpFilePart=0x0) returned 0x3f [0176.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0176.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0176.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6a [0176.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0176.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0176.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0176.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x38 [0176.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x39 [0176.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0176.586] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0176.586] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0176.586] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0176.586] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0176.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0176.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0176.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x38 [0176.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x39 [0176.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0176.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0176.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0176.588] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0176.588] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0176.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0176.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x5f [0176.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x60 [0176.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.589] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.589] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.589] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x5f [0176.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x60 [0176.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.590] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.590] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6b [0176.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0176.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\ENYBENY.png", lpFilePart=0x0) returned 0x6b [0176.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0176.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0176.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x96 [0176.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0176.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0176.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\ENYBENY.TXT", lpFilePart=0x0) returned 0x44 [0176.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0176.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0176.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0176.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0176.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0176.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6f [0176.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0176.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0176.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0176.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x38 [0176.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", lpFilePart=0x0) returned 0x39 [0176.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0176.612] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0176.613] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0176.613] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0176.613] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0176.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0176.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0176.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x38 [0176.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", lpFilePart=0x0) returned 0x39 [0176.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0176.614] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0176.614] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0176.614] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0176.614] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0176.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0176.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x45 [0176.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpFilePart=0x0) returned 0x46 [0176.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.615] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.615] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.615] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.615] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.615] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0176.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x45 [0176.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpFilePart=0x0) returned 0x46 [0176.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0176.616] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.616] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.616] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0176.616] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0176.617] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0176.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0176.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0176.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x54 [0176.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpFilePart=0x0) returned 0x55 [0176.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0176.618] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.618] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.618] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0176.619] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0176.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0176.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0176.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x54 [0176.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpFilePart=0x0) returned 0x55 [0176.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0176.619] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.620] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.620] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0176.620] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0176.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0176.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0176.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", lpFilePart=0x0) returned 0x5d [0176.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", lpFilePart=0x0) returned 0x5e [0176.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0176.622] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0176.622] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0176.622] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0176.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0176.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0176.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", lpFilePart=0x0) returned 0x5d [0176.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", lpFilePart=0x0) returned 0x5e [0176.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0176.623] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0176.623] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0176.623] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0176.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0176.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x69 [0176.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0176.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0176.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\ENYBENY.png", lpFilePart=0x0) returned 0x69 [0176.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0176.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0176.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x94 [0176.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0176.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0176.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0176.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0176.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0176.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0176.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0176.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0176.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0176.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0176.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0176.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0176.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x54 [0176.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpFilePart=0x0) returned 0x55 [0176.921] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0176.922] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.922] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.922] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0176.922] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0176.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0176.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0176.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x54 [0176.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpFilePart=0x0) returned 0x55 [0176.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0176.923] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.923] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0176.923] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0176.923] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0176.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0176.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0176.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x5c [0176.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpFilePart=0x0) returned 0x5d [0176.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0176.924] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0176.924] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0176.925] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0176.925] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0176.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0176.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0176.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x5c [0176.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpFilePart=0x0) returned 0x5d [0176.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0176.925] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0176.925] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0176.926] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0176.926] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0176.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0176.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0176.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x68 [0176.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpFilePart=0x0) returned 0x69 [0176.926] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0176.927] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0176.927] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0176.927] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0176.928] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0176.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0176.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0176.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x68 [0176.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpFilePart=0x0) returned 0x69 [0176.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0176.928] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0176.928] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0176.928] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0176.929] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0176.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0176.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0176.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x6c [0176.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpFilePart=0x0) returned 0x6d [0176.929] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0176.929] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0176.929] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0176.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0176.930] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0176.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0176.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0176.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x6c [0176.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpFilePart=0x0) returned 0x6d [0176.930] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0176.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0176.930] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0176.931] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0176.931] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0176.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0176.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0176.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\ENYBENY.TXT", lpFilePart=0x0) returned 0x78 [0176.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0176.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0176.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\ENYBENY.png", lpFilePart=0x0) returned 0x78 [0176.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0176.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0176.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa3 [0176.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0176.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0176.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\ENYBENY.TXT", lpFilePart=0x0) returned 0x74 [0176.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0176.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0176.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0176.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\ENYBENY.png", lpFilePart=0x0) returned 0x74 [0176.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0176.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0176.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0176.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x9f [0176.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0176.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0177.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0177.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0177.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0177.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0177.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0177.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0177.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0177.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0177.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0177.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0177.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0177.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0177.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0177.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0177.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0177.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0177.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0177.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0177.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0177.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0177.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\ENYBENY.TXT", lpFilePart=0x0) returned 0x51 [0177.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0177.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0177.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\ENYBENY.png", lpFilePart=0x0) returned 0x51 [0177.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0177.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0177.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0177.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7c [0177.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0177.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0177.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\ENYBENY.TXT", lpFilePart=0x0) returned 0x44 [0177.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0177.710] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0177.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0177.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0177.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0177.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0177.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6f [0177.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0177.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0177.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0177.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x37 [0177.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x38 [0177.776] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0177.776] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.776] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.777] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.777] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.777] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.777] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.777] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.777] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.778] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.778] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.778] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.778] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.778] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.778] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.779] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.779] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.779] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.779] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.779] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.779] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.780] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.780] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.780] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.780] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.780] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.780] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.780] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.781] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0177.781] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0177.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0177.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0177.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x37 [0177.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x38 [0177.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0177.781] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.782] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.782] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.782] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.782] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.782] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.782] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.782] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.783] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.783] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.783] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.783] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.783] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.783] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.784] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.784] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.784] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.784] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.784] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.784] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.784] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.785] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.785] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.785] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.785] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.785] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.785] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0177.786] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0177.786] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0177.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0177.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0177.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x3e [0177.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x3f [0177.786] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0177.787] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0177.788] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0177.788] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0177.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0177.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0177.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x3e [0177.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x3f [0177.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0177.789] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0177.789] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0177.790] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0177.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0177.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0177.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0177.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0177.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0177.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0177.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0177.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0177.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0177.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0177.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0177.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0177.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x43 [0177.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x44 [0177.798] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0177.798] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0177.798] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0177.799] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0177.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0177.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0177.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x43 [0177.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x44 [0177.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0177.799] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0177.800] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0177.800] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0177.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0177.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4f [0177.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0177.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0177.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\ENYBENY.png", lpFilePart=0x0) returned 0x4f [0177.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0177.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0177.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0177.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7a [0177.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0177.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0177.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0177.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x3e [0177.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x3f [0177.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0177.812] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0177.812] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0177.812] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0177.813] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0177.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0177.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0177.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x3e [0177.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x3f [0177.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0177.813] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0177.814] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0177.814] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0177.814] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0177.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0177.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0177.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x42 [0177.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x43 [0177.814] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0177.815] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0177.815] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0177.815] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0177.815] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0177.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0177.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0177.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x42 [0177.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x43 [0177.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0177.816] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0177.816] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0177.816] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0177.816] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0177.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0177.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0177.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x71 [0177.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x72 [0177.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0177.847] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0177.847] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0177.848] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0177.848] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0177.848] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0177.848] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0177.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0177.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0177.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x71 [0177.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x72 [0177.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0177.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0177.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0177.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0177.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0177.850] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0177.850] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0177.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0177.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0177.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT", lpFilePart=0x0) returned 0x7d [0177.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0177.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0177.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png", lpFilePart=0x0) returned 0x7d [0177.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0177.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0177.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0177.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa8 [0177.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0177.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0177.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4e [0177.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0177.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0177.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0177.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\ENYBENY.png", lpFilePart=0x0) returned 0x4e [0177.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0177.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0177.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0177.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x79 [0177.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0177.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0178.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0178.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.061] GetFileType (hFile=0x238) returned 0x1 [0178.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.061] GetFileType (hFile=0x238) returned 0x1 [0178.061] WriteFile (in: hFile=0x238, lpBuffer=0x25fbea8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x25fbea8*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0178.063] CloseHandle (hObject=0x238) returned 1 [0178.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0178.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.064] GetFileType (hFile=0x238) returned 0x1 [0178.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0178.064] GetFileType (hFile=0x238) returned 0x1 [0178.064] WriteFile (in: hFile=0x238, lpBuffer=0x25fcf70*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x25fcf70*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0178.065] CloseHandle (hObject=0x238) returned 1 [0178.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0178.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.066] GetFileType (hFile=0x238) returned 0x1 [0178.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.066] GetFileType (hFile=0x238) returned 0x1 [0178.067] WriteFile (in: hFile=0x238, lpBuffer=0x2603be8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2603be8*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0178.068] CloseHandle (hObject=0x238) returned 1 [0178.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x50 [0178.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x51 [0178.068] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.069] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.069] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x50 [0178.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x51 [0178.070] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.070] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.070] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0178.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x55 [0178.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpFilePart=0x0) returned 0x56 [0178.071] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0178.072] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.072] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.072] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0178.072] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0178.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0178.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0178.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x55 [0178.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpFilePart=0x0) returned 0x56 [0178.073] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0178.073] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.073] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.073] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0178.073] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0178.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0178.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", lpFilePart=0x0) returned 0x58 [0178.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", lpFilePart=0x0) returned 0x59 [0178.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0178.075] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0178.075] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0178.075] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0178.075] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0178.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0178.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", lpFilePart=0x0) returned 0x58 [0178.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", lpFilePart=0x0) returned 0x59 [0178.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0178.076] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0178.076] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0178.076] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0178.077] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0178.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0178.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\ENYBENY.TXT", lpFilePart=0x0) returned 0x64 [0178.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0178.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.081] GetFileType (hFile=0x238) returned 0x1 [0178.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0178.081] GetFileType (hFile=0x238) returned 0x1 [0178.081] WriteFile (in: hFile=0x238, lpBuffer=0x2615b60*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2615b60*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0178.082] CloseHandle (hObject=0x238) returned 1 [0178.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\ENYBENY.png", lpFilePart=0x0) returned 0x64 [0178.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0178.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.083] GetFileType (hFile=0x238) returned 0x1 [0178.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0178.083] GetFileType (hFile=0x238) returned 0x1 [0178.083] WriteFile (in: hFile=0x238, lpBuffer=0x2616c60*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2616c60*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0178.085] CloseHandle (hObject=0x238) returned 1 [0178.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8f [0178.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0178.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.208] GetFileType (hFile=0x238) returned 0x1 [0178.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0178.208] GetFileType (hFile=0x238) returned 0x1 [0178.208] WriteFile (in: hFile=0x238, lpBuffer=0x261d970*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x261d970*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0178.209] CloseHandle (hObject=0x238) returned 1 [0178.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\ENYBENY.TXT", lpFilePart=0x0) returned 0x61 [0178.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0178.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.211] GetFileType (hFile=0x238) returned 0x1 [0178.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0178.211] GetFileType (hFile=0x238) returned 0x1 [0178.212] WriteFile (in: hFile=0x238, lpBuffer=0x2627e08*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2627e08*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0178.213] CloseHandle (hObject=0x238) returned 1 [0178.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\ENYBENY.png", lpFilePart=0x0) returned 0x61 [0178.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0178.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.214] GetFileType (hFile=0x238) returned 0x1 [0178.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0178.214] GetFileType (hFile=0x238) returned 0x1 [0178.214] WriteFile (in: hFile=0x238, lpBuffer=0x2628f00*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2628f00*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0178.216] CloseHandle (hObject=0x238) returned 1 [0178.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8c [0178.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0178.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.217] GetFileType (hFile=0x238) returned 0x1 [0178.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0178.217] GetFileType (hFile=0x238) returned 0x1 [0178.217] WriteFile (in: hFile=0x238, lpBuffer=0x262fc08*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x262fc08*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0178.218] CloseHandle (hObject=0x238) returned 1 [0178.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5c [0178.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.220] GetFileType (hFile=0x238) returned 0x1 [0178.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.222] GetFileType (hFile=0x238) returned 0x1 [0178.225] WriteFile (in: hFile=0x238, lpBuffer=0x263a090*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x263a090*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0178.226] CloseHandle (hObject=0x238) returned 1 [0178.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\ENYBENY.png", lpFilePart=0x0) returned 0x5c [0178.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.227] GetFileType (hFile=0x238) returned 0x1 [0178.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0178.227] GetFileType (hFile=0x238) returned 0x1 [0178.228] WriteFile (in: hFile=0x238, lpBuffer=0x263b180*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x263b180*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0178.229] CloseHandle (hObject=0x238) returned 1 [0178.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x87 [0178.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.515] GetFileType (hFile=0x238) returned 0x1 [0178.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.515] GetFileType (hFile=0x238) returned 0x1 [0178.515] WriteFile (in: hFile=0x238, lpBuffer=0x2641e60*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2641e60*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0178.516] CloseHandle (hObject=0x238) returned 1 [0178.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x3d [0178.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x3e [0178.517] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.517] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.518] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.518] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.518] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x3d [0178.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x3e [0178.518] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.519] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.519] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.519] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.519] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0178.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x45 [0178.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpFilePart=0x0) returned 0x46 [0178.520] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0178.520] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.520] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0178.520] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0178.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0178.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0178.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x45 [0178.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpFilePart=0x0) returned 0x46 [0178.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0178.521] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.521] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0178.521] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0178.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0178.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\ENYBENY.TXT", lpFilePart=0x0) returned 0x51 [0178.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0178.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.523] GetFileType (hFile=0x238) returned 0x1 [0178.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0178.523] GetFileType (hFile=0x238) returned 0x1 [0178.524] WriteFile (in: hFile=0x238, lpBuffer=0x2650650*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2650650*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0178.525] CloseHandle (hObject=0x238) returned 1 [0178.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\ENYBENY.png", lpFilePart=0x0) returned 0x51 [0178.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0178.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.527] GetFileType (hFile=0x238) returned 0x1 [0178.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0178.527] GetFileType (hFile=0x238) returned 0x1 [0178.527] WriteFile (in: hFile=0x238, lpBuffer=0x2651728*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2651728*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0178.528] CloseHandle (hObject=0x238) returned 1 [0178.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7c [0178.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0178.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.529] GetFileType (hFile=0x238) returned 0x1 [0178.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0178.529] GetFileType (hFile=0x238) returned 0x1 [0178.530] WriteFile (in: hFile=0x238, lpBuffer=0x26583d0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26583d0*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0178.530] CloseHandle (hObject=0x238) returned 1 [0178.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\ENYBENY.TXT", lpFilePart=0x0) returned 0x49 [0178.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.544] GetFileType (hFile=0x238) returned 0x1 [0178.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.544] GetFileType (hFile=0x238) returned 0x1 [0178.545] WriteFile (in: hFile=0x238, lpBuffer=0x2662808*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2662808*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0178.546] CloseHandle (hObject=0x238) returned 1 [0178.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\ENYBENY.png", lpFilePart=0x0) returned 0x49 [0178.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.547] GetFileType (hFile=0x238) returned 0x1 [0178.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0178.547] GetFileType (hFile=0x238) returned 0x1 [0178.547] WriteFile (in: hFile=0x238, lpBuffer=0x26638d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26638d0*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0178.549] CloseHandle (hObject=0x238) returned 1 [0178.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x74 [0178.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.553] GetFileType (hFile=0x238) returned 0x1 [0178.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.553] GetFileType (hFile=0x238) returned 0x1 [0178.553] WriteFile (in: hFile=0x238, lpBuffer=0x266a548*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x266a548*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0178.554] CloseHandle (hObject=0x238) returned 1 [0178.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3d [0178.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3e [0178.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.556] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.556] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.556] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3d [0178.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3e [0178.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.557] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.557] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\ENYBENY.TXT", lpFilePart=0x0) returned 0x49 [0178.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.561] GetFileType (hFile=0x238) returned 0x1 [0178.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.561] GetFileType (hFile=0x238) returned 0x1 [0178.562] WriteFile (in: hFile=0x238, lpBuffer=0x26768a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26768a0*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0178.563] CloseHandle (hObject=0x238) returned 1 [0178.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\ENYBENY.png", lpFilePart=0x0) returned 0x49 [0178.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.565] GetFileType (hFile=0x238) returned 0x1 [0178.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0178.565] GetFileType (hFile=0x238) returned 0x1 [0178.565] WriteFile (in: hFile=0x238, lpBuffer=0x2677968*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2677968*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0178.567] CloseHandle (hObject=0x238) returned 1 [0178.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x74 [0178.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.568] GetFileType (hFile=0x238) returned 0x1 [0178.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.568] GetFileType (hFile=0x238) returned 0x1 [0178.569] WriteFile (in: hFile=0x238, lpBuffer=0x267e5e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x267e5e0*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0178.569] CloseHandle (hObject=0x238) returned 1 [0178.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3e [0178.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3f [0178.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.570] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.571] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.571] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3e [0178.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3f [0178.571] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.571] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.572] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.572] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0178.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.573] GetFileType (hFile=0x238) returned 0x1 [0178.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0178.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0178.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0178.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3f [0178.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x40 [0178.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.580] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.580] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.580] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3f [0178.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x40 [0178.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.583] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.583] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0178.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0178.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0178.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0178.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3f [0178.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x40 [0178.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.593] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.593] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.593] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3f [0178.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x40 [0178.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.594] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.594] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.594] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0178.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0178.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0178.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0178.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0178.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0178.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0178.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0178.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x49 [0178.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4a [0178.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.634] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.634] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.634] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.635] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.635] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0178.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x49 [0178.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4a [0178.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0178.641] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.642] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.642] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0178.642] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0178.642] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0178.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0178.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0178.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x56 [0178.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x57 [0178.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0178.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0178.644] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0178.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0178.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0178.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x56 [0178.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x57 [0178.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0178.644] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.644] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.644] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.645] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.645] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.645] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.645] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0178.645] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0178.645] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0178.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0178.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0178.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.EnyBenied", lpFilePart=0x0) returned 0x72 [0178.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0178.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0178.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0179.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0179.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0179.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0179.205] GetFileType (hFile=0x228) returned 0x1 [0179.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0179.205] GetFileType (hFile=0x228) returned 0x1 [0179.205] ReadFile (in: hFile=0x228, lpBuffer=0x2608908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2608908*, lpNumberOfBytesRead=0x1adb88*=0x8e9, lpOverlapped=0x0) returned 1 [0179.334] ReadFile (in: hFile=0x228, lpBuffer=0x26085d9, nNumberOfBytesToRead=0x317, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x26085d9*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0179.335] ReadFile (in: hFile=0x228, lpBuffer=0x2608908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x2608908*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0179.335] CloseHandle (hObject=0x228) returned 1 [0179.335] WriteFile (in: hFile=0x238, lpBuffer=0x2606e48*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x2606e48*, lpNumberOfBytesWritten=0x1ada58*=0x910, lpOverlapped=0x0) returned 1 [0179.336] CloseHandle (hObject=0x238) returned 1 [0179.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0179.336] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk")) returned 1 [0179.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk.EnyBenied", lpFilePart=0x0) returned 0x85 [0179.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0179.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0179.340] GetFileType (hFile=0x238) returned 0x1 [0179.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0179.340] GetFileType (hFile=0x238) returned 0x1 [0179.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0179.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0179.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0179.804] GetFileType (hFile=0x228) returned 0x1 [0179.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0179.804] GetFileType (hFile=0x228) returned 0x1 [0179.804] ReadFile (in: hFile=0x228, lpBuffer=0x273a688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x273a688*, lpNumberOfBytesRead=0x1adb88*=0x5a7, lpOverlapped=0x0) returned 1 [0180.026] ReadFile (in: hFile=0x228, lpBuffer=0x273a417, nNumberOfBytesToRead=0x259, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x273a417*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0180.027] ReadFile (in: hFile=0x228, lpBuffer=0x273a688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x273a688*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0180.027] CloseHandle (hObject=0x228) returned 1 [0180.027] WriteFile (in: hFile=0x238, lpBuffer=0x2738b80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x2738b80*, lpNumberOfBytesWritten=0x1ada58*=0x5d0, lpOverlapped=0x0) returned 1 [0180.028] CloseHandle (hObject=0x238) returned 1 [0180.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0180.028] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk")) returned 1 [0180.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.EnyBenied", lpFilePart=0x0) returned 0x72 [0180.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0180.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0180.030] GetFileType (hFile=0x238) returned 0x1 [0180.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0180.031] GetFileType (hFile=0x238) returned 0x1 [0180.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0180.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0180.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0180.647] GetFileType (hFile=0x228) returned 0x1 [0180.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0180.647] GetFileType (hFile=0x228) returned 0x1 [0180.647] ReadFile (in: hFile=0x228, lpBuffer=0x26820b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x26820b0*, lpNumberOfBytesRead=0x1adb88*=0x122, lpOverlapped=0x0) returned 1 [0180.649] ReadFile (in: hFile=0x228, lpBuffer=0x26820b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x26820b0*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0180.649] CloseHandle (hObject=0x228) returned 1 [0180.649] WriteFile (in: hFile=0x238, lpBuffer=0x26805f0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x26805f0*, lpNumberOfBytesWritten=0x1ada58*=0x150, lpOverlapped=0x0) returned 1 [0180.652] CloseHandle (hObject=0x238) returned 1 [0180.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0180.653] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 1 [0180.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.EnyBenied", lpFilePart=0x0) returned 0x74 [0180.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0180.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0180.655] GetFileType (hFile=0x238) returned 0x1 [0180.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0180.655] GetFileType (hFile=0x238) returned 0x1 [0181.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0181.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0181.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0181.390] GetFileType (hFile=0x228) returned 0x1 [0181.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0181.390] GetFileType (hFile=0x228) returned 0x1 [0181.390] ReadFile (in: hFile=0x228, lpBuffer=0x27c95a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27c95a0*, lpNumberOfBytesRead=0x1adb88*=0x110, lpOverlapped=0x0) returned 1 [0181.392] ReadFile (in: hFile=0x228, lpBuffer=0x27c95a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27c95a0*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0181.392] CloseHandle (hObject=0x228) returned 1 [0181.392] WriteFile (in: hFile=0x238, lpBuffer=0x27c7ae0*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x27c7ae0*, lpNumberOfBytesWritten=0x1ada58*=0x140, lpOverlapped=0x0) returned 1 [0181.393] CloseHandle (hObject=0x238) returned 1 [0181.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0181.393] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 1 [0181.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0181.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x62 [0181.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x63 [0181.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0181.395] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0181.395] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0181.396] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0181.396] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0181.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0181.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0181.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0181.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x62 [0181.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x63 [0181.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0181.397] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0181.397] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0181.397] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0181.397] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0181.397] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0181.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0181.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0181.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0181.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x77 [0181.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x78 [0181.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0181.399] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.399] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0181.399] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0181.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0181.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0181.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0181.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x77 [0181.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x78 [0181.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0181.400] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.400] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0181.400] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0181.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0181.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0181.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\ENYBENY.TXT", lpFilePart=0x0) returned 0x83 [0181.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0181.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0181.431] GetFileType (hFile=0x238) returned 0x1 [0181.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0181.431] GetFileType (hFile=0x238) returned 0x1 [0181.432] WriteFile (in: hFile=0x238, lpBuffer=0x27d99c8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x27d99c8*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0181.433] CloseHandle (hObject=0x238) returned 1 [0181.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\ENYBENY.png", lpFilePart=0x0) returned 0x83 [0181.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0181.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0181.435] GetFileType (hFile=0x238) returned 0x1 [0181.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0181.435] GetFileType (hFile=0x238) returned 0x1 [0181.435] WriteFile (in: hFile=0x238, lpBuffer=0x27dab00*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x27dab00*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0181.436] CloseHandle (hObject=0x238) returned 1 [0181.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xae [0181.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0181.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0181.438] GetFileType (hFile=0x238) returned 0x1 [0181.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0181.438] GetFileType (hFile=0x238) returned 0x1 [0181.438] WriteFile (in: hFile=0x238, lpBuffer=0x27e18c8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x27e18c8*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0181.439] CloseHandle (hObject=0x238) returned 1 [0181.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0181.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x6a [0181.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x6b [0181.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0181.440] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.441] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.442] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0181.442] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0181.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0181.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0181.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0181.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x6a [0181.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x6b [0181.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0181.446] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.446] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.446] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.447] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.447] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.447] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.447] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.447] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0181.448] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0181.448] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0181.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0181.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0181.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk.EnyBenied", lpFilePart=0x0) returned 0x86 [0181.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0181.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0181.451] GetFileType (hFile=0x238) returned 0x1 [0181.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0181.451] GetFileType (hFile=0x238) returned 0x1 [0182.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0182.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0182.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0182.027] GetFileType (hFile=0x228) returned 0x1 [0182.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0182.027] GetFileType (hFile=0x228) returned 0x1 [0182.027] ReadFile (in: hFile=0x228, lpBuffer=0x2730548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2730548*, lpNumberOfBytesRead=0x1ada88*=0x8dd, lpOverlapped=0x0) returned 1 [0182.031] ReadFile (in: hFile=0x228, lpBuffer=0x273020d, nNumberOfBytesToRead=0x323, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x273020d*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0182.032] ReadFile (in: hFile=0x228, lpBuffer=0x2730548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2730548*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0182.032] CloseHandle (hObject=0x228) returned 1 [0182.032] WriteFile (in: hFile=0x238, lpBuffer=0x272ea60*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x272ea60*, lpNumberOfBytesWritten=0x1ad958*=0x900, lpOverlapped=0x0) returned 1 [0182.034] CloseHandle (hObject=0x238) returned 1 [0182.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0182.035] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk")) returned 1 [0182.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk.EnyBenied", lpFilePart=0x0) returned 0x8e [0182.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0182.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0182.041] GetFileType (hFile=0x238) returned 0x1 [0182.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0182.041] GetFileType (hFile=0x238) returned 0x1 [0182.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0182.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0182.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0182.700] GetFileType (hFile=0x228) returned 0x1 [0182.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0182.700] GetFileType (hFile=0x228) returned 0x1 [0182.700] ReadFile (in: hFile=0x228, lpBuffer=0x26783d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26783d0*, lpNumberOfBytesRead=0x1ada88*=0x5ad, lpOverlapped=0x0) returned 1 [0182.702] ReadFile (in: hFile=0x228, lpBuffer=0x2678165, nNumberOfBytesToRead=0x253, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2678165*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0182.703] ReadFile (in: hFile=0x228, lpBuffer=0x26783d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26783d0*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0182.703] CloseHandle (hObject=0x228) returned 1 [0182.703] WriteFile (in: hFile=0x238, lpBuffer=0x26768c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x26768c8*, lpNumberOfBytesWritten=0x1ad958*=0x5d0, lpOverlapped=0x0) returned 1 [0182.705] CloseHandle (hObject=0x238) returned 1 [0182.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0182.705] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk")) returned 1 [0182.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.EnyBenied", lpFilePart=0x0) returned 0x8a [0182.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0182.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0182.710] GetFileType (hFile=0x238) returned 0x1 [0182.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0182.710] GetFileType (hFile=0x238) returned 0x1 [0183.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0183.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0183.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0183.242] GetFileType (hFile=0x228) returned 0x1 [0183.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0183.242] GetFileType (hFile=0x228) returned 0x1 [0183.242] ReadFile (in: hFile=0x228, lpBuffer=0x27bfe28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x27bfe28*, lpNumberOfBytesRead=0x1ada88*=0x5a9, lpOverlapped=0x0) returned 1 [0183.245] ReadFile (in: hFile=0x228, lpBuffer=0x27bfbb9, nNumberOfBytesToRead=0x257, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x27bfbb9*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0183.246] ReadFile (in: hFile=0x228, lpBuffer=0x27bfe28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x27bfe28*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0183.246] CloseHandle (hObject=0x228) returned 1 [0183.246] WriteFile (in: hFile=0x238, lpBuffer=0x27be330*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x27be330*, lpNumberOfBytesWritten=0x1ad958*=0x5d0, lpOverlapped=0x0) returned 1 [0183.247] CloseHandle (hObject=0x238) returned 1 [0183.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0183.247] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk")) returned 1 [0183.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.EnyBenied", lpFilePart=0x0) returned 0x88 [0183.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0183.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0183.251] GetFileType (hFile=0x238) returned 0x1 [0183.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0183.251] GetFileType (hFile=0x238) returned 0x1 [0183.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0183.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0183.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0183.906] GetFileType (hFile=0x228) returned 0x1 [0183.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0183.906] GetFileType (hFile=0x228) returned 0x1 [0183.906] ReadFile (in: hFile=0x228, lpBuffer=0x2707908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2707908*, lpNumberOfBytesRead=0x1ada88*=0x491, lpOverlapped=0x0) returned 1 [0183.909] ReadFile (in: hFile=0x228, lpBuffer=0x2707581, nNumberOfBytesToRead=0x36f, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2707581*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0183.909] ReadFile (in: hFile=0x228, lpBuffer=0x2707908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2707908*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0183.909] CloseHandle (hObject=0x228) returned 1 [0183.909] WriteFile (in: hFile=0x238, lpBuffer=0x2705e20*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x2705e20*, lpNumberOfBytesWritten=0x1ad958*=0x4c0, lpOverlapped=0x0) returned 1 [0183.911] CloseHandle (hObject=0x238) returned 1 [0183.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0183.911] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk")) returned 1 [0183.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk.EnyBenied", lpFilePart=0x0) returned 0x8d [0183.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0183.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0183.916] GetFileType (hFile=0x238) returned 0x1 [0183.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0183.916] GetFileType (hFile=0x238) returned 0x1 [0184.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0184.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0184.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0184.569] GetFileType (hFile=0x228) returned 0x1 [0184.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0184.569] GetFileType (hFile=0x228) returned 0x1 [0184.569] ReadFile (in: hFile=0x228, lpBuffer=0x264f328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x264f328*, lpNumberOfBytesRead=0x1ada88*=0x4cc, lpOverlapped=0x0) returned 1 [0184.572] ReadFile (in: hFile=0x228, lpBuffer=0x264efdc, nNumberOfBytesToRead=0x334, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x264efdc*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0184.572] ReadFile (in: hFile=0x228, lpBuffer=0x264f328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x264f328*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0184.572] CloseHandle (hObject=0x228) returned 1 [0184.572] WriteFile (in: hFile=0x238, lpBuffer=0x264d828*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x264d828*, lpNumberOfBytesWritten=0x1ad958*=0x4f0, lpOverlapped=0x0) returned 1 [0184.574] CloseHandle (hObject=0x238) returned 1 [0184.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0184.574] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk")) returned 1 [0184.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.EnyBenied", lpFilePart=0x0) returned 0x89 [0184.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0184.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0184.580] GetFileType (hFile=0x238) returned 0x1 [0184.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0184.580] GetFileType (hFile=0x238) returned 0x1 [0185.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0185.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0185.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0185.055] GetFileType (hFile=0x228) returned 0x1 [0185.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0185.055] GetFileType (hFile=0x228) returned 0x1 [0185.055] ReadFile (in: hFile=0x228, lpBuffer=0x2796c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2796c90*, lpNumberOfBytesRead=0x1ada88*=0x4cc, lpOverlapped=0x0) returned 1 [0185.058] ReadFile (in: hFile=0x228, lpBuffer=0x2796944, nNumberOfBytesToRead=0x334, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2796944*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0185.058] ReadFile (in: hFile=0x228, lpBuffer=0x2796c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2796c90*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0185.059] CloseHandle (hObject=0x228) returned 1 [0185.059] WriteFile (in: hFile=0x238, lpBuffer=0x27951a0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x27951a0*, lpNumberOfBytesWritten=0x1ad958*=0x4f0, lpOverlapped=0x0) returned 1 [0185.060] CloseHandle (hObject=0x238) returned 1 [0185.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0185.060] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk")) returned 1 [0185.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk.EnyBenied", lpFilePart=0x0) returned 0x91 [0185.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0185.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0185.065] GetFileType (hFile=0x238) returned 0x1 [0185.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0185.065] GetFileType (hFile=0x238) returned 0x1 [0185.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0185.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0185.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0185.545] GetFileType (hFile=0x228) returned 0x1 [0185.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0185.545] GetFileType (hFile=0x228) returned 0x1 [0185.546] ReadFile (in: hFile=0x228, lpBuffer=0x26de710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26de710*, lpNumberOfBytesRead=0x1ada88*=0x60b, lpOverlapped=0x0) returned 1 [0185.548] ReadFile (in: hFile=0x228, lpBuffer=0x26de503, nNumberOfBytesToRead=0x1f5, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26de503*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0185.549] ReadFile (in: hFile=0x228, lpBuffer=0x26de710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x26de710*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0185.549] CloseHandle (hObject=0x228) returned 1 [0185.549] WriteFile (in: hFile=0x238, lpBuffer=0x26dcc00*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x26dcc00*, lpNumberOfBytesWritten=0x1ad958*=0x630, lpOverlapped=0x0) returned 1 [0185.621] CloseHandle (hObject=0x238) returned 1 [0185.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0185.621] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk")) returned 1 [0185.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.EnyBenied", lpFilePart=0x0) returned 0x8d [0185.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0185.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0185.624] GetFileType (hFile=0x238) returned 0x1 [0185.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0185.625] GetFileType (hFile=0x238) returned 0x1 [0186.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x1ad470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0186.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad950) returned 1 [0186.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0186.150] GetFileType (hFile=0x228) returned 0x1 [0186.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0186.151] GetFileType (hFile=0x228) returned 0x1 [0186.151] ReadFile (in: hFile=0x228, lpBuffer=0x2626298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2626298*, lpNumberOfBytesRead=0x1ada88*=0x60b, lpOverlapped=0x0) returned 1 [0186.168] ReadFile (in: hFile=0x228, lpBuffer=0x262608b, nNumberOfBytesToRead=0x1f5, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x262608b*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0186.169] ReadFile (in: hFile=0x228, lpBuffer=0x2626298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ada88, lpOverlapped=0x0 | out: lpBuffer=0x2626298*, lpNumberOfBytesRead=0x1ada88*=0x0, lpOverlapped=0x0) returned 1 [0186.169] CloseHandle (hObject=0x228) returned 1 [0186.169] WriteFile (in: hFile=0x238, lpBuffer=0x2624798*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x2624798*, lpNumberOfBytesWritten=0x1ad958*=0x630, lpOverlapped=0x0) returned 1 [0186.170] CloseHandle (hObject=0x238) returned 1 [0186.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x1ad580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0186.170] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk")) returned 1 [0186.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\ENYBENY.TXT", lpFilePart=0x0) returned 0x76 [0186.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.176] GetFileType (hFile=0x238) returned 0x1 [0186.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.176] GetFileType (hFile=0x238) returned 0x1 [0186.177] WriteFile (in: hFile=0x238, lpBuffer=0x2630f40*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2630f40*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0186.178] CloseHandle (hObject=0x238) returned 1 [0186.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\ENYBENY.png", lpFilePart=0x0) returned 0x76 [0186.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0186.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.180] GetFileType (hFile=0x238) returned 0x1 [0186.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0186.180] GetFileType (hFile=0x238) returned 0x1 [0186.180] WriteFile (in: hFile=0x238, lpBuffer=0x2632060*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2632060*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0186.181] CloseHandle (hObject=0x238) returned 1 [0186.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa1 [0186.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.183] GetFileType (hFile=0x238) returned 0x1 [0186.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.183] GetFileType (hFile=0x238) returned 0x1 [0186.184] WriteFile (in: hFile=0x238, lpBuffer=0x2638de0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2638de0*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0186.185] CloseHandle (hObject=0x238) returned 1 [0186.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6e [0186.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0186.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.189] GetFileType (hFile=0x238) returned 0x1 [0186.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0186.189] GetFileType (hFile=0x238) returned 0x1 [0186.189] WriteFile (in: hFile=0x238, lpBuffer=0x26432a8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x26432a8*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0186.190] CloseHandle (hObject=0x238) returned 1 [0186.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ENYBENY.png", lpFilePart=0x0) returned 0x6e [0186.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0186.191] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.192] GetFileType (hFile=0x238) returned 0x1 [0186.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0186.192] GetFileType (hFile=0x238) returned 0x1 [0186.192] WriteFile (in: hFile=0x238, lpBuffer=0x26443b8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x26443b8*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0186.194] CloseHandle (hObject=0x238) returned 1 [0186.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x99 [0186.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0186.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.197] GetFileType (hFile=0x238) returned 0x1 [0186.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0186.197] GetFileType (hFile=0x238) returned 0x1 [0186.197] WriteFile (in: hFile=0x238, lpBuffer=0x264b108*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x264b108*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0186.198] CloseHandle (hObject=0x238) returned 1 [0186.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\ENYBENY.TXT", lpFilePart=0x0) returned 0x62 [0186.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.200] GetFileType (hFile=0x238) returned 0x1 [0186.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.200] GetFileType (hFile=0x238) returned 0x1 [0186.201] WriteFile (in: hFile=0x238, lpBuffer=0x26555a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x26555a0*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0186.202] CloseHandle (hObject=0x238) returned 1 [0186.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\ENYBENY.png", lpFilePart=0x0) returned 0x62 [0186.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.204] GetFileType (hFile=0x238) returned 0x1 [0186.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0186.204] GetFileType (hFile=0x238) returned 0x1 [0186.204] WriteFile (in: hFile=0x238, lpBuffer=0x2656698*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2656698*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0186.205] CloseHandle (hObject=0x238) returned 1 [0186.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8d [0186.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.207] GetFileType (hFile=0x238) returned 0x1 [0186.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.207] GetFileType (hFile=0x238) returned 0x1 [0186.208] WriteFile (in: hFile=0x238, lpBuffer=0x265d3a0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x265d3a0*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0186.209] CloseHandle (hObject=0x238) returned 1 [0186.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0186.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpFilePart=0x0) returned 0x52 [0186.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpFilePart=0x0) returned 0x53 [0186.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0186.210] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.211] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.211] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0186.211] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0186.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0186.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0186.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpFilePart=0x0) returned 0x52 [0186.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpFilePart=0x0) returned 0x53 [0186.211] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0186.212] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.212] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.212] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0186.212] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0186.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0186.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpFilePart=0x0) returned 0x56 [0186.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpFilePart=0x0) returned 0x57 [0186.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0186.213] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.213] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.213] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.213] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.214] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.214] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.214] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0186.214] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0186.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0186.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpFilePart=0x0) returned 0x56 [0186.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpFilePart=0x0) returned 0x57 [0186.214] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0186.215] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.215] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.215] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.215] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.215] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.215] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.215] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0186.216] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0186.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0186.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", lpFilePart=0x0) returned 0x5f [0186.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", lpFilePart=0x0) returned 0x60 [0186.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.217] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.218] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.218] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", lpFilePart=0x0) returned 0x5f [0186.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", lpFilePart=0x0) returned 0x60 [0186.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.218] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.219] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.219] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6b [0186.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.220] GetFileType (hFile=0x238) returned 0x1 [0186.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.220] GetFileType (hFile=0x238) returned 0x1 [0186.221] WriteFile (in: hFile=0x238, lpBuffer=0x2670168*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2670168*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0186.222] CloseHandle (hObject=0x238) returned 1 [0186.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\ENYBENY.png", lpFilePart=0x0) returned 0x6b [0186.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0186.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.223] GetFileType (hFile=0x238) returned 0x1 [0186.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0186.224] GetFileType (hFile=0x238) returned 0x1 [0186.224] WriteFile (in: hFile=0x238, lpBuffer=0x2671270*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2671270*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0186.225] CloseHandle (hObject=0x238) returned 1 [0186.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x96 [0186.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.226] GetFileType (hFile=0x238) returned 0x1 [0186.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.226] GetFileType (hFile=0x238) returned 0x1 [0186.226] WriteFile (in: hFile=0x238, lpBuffer=0x2677fa8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2677fa8*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0186.227] CloseHandle (hObject=0x238) returned 1 [0186.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", lpFilePart=0x0) returned 0x5f [0186.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", lpFilePart=0x0) returned 0x60 [0186.228] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.229] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", lpFilePart=0x0) returned 0x5f [0186.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", lpFilePart=0x0) returned 0x60 [0186.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.229] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.229] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.229] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6b [0186.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.231] GetFileType (hFile=0x238) returned 0x1 [0186.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.231] GetFileType (hFile=0x238) returned 0x1 [0186.232] WriteFile (in: hFile=0x238, lpBuffer=0x2684a90*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2684a90*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0186.233] CloseHandle (hObject=0x238) returned 1 [0186.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\ENYBENY.png", lpFilePart=0x0) returned 0x6b [0186.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0186.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.235] GetFileType (hFile=0x238) returned 0x1 [0186.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0186.235] GetFileType (hFile=0x238) returned 0x1 [0186.235] WriteFile (in: hFile=0x238, lpBuffer=0x2685b98*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2685b98*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0186.236] CloseHandle (hObject=0x238) returned 1 [0186.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x96 [0186.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.238] GetFileType (hFile=0x238) returned 0x1 [0186.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.238] GetFileType (hFile=0x238) returned 0x1 [0186.238] WriteFile (in: hFile=0x238, lpBuffer=0x268c8d0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x268c8d0*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0186.239] CloseHandle (hObject=0x238) returned 1 [0186.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", lpFilePart=0x0) returned 0x5f [0186.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", lpFilePart=0x0) returned 0x60 [0186.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.240] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.240] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.240] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", lpFilePart=0x0) returned 0x5f [0186.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", lpFilePart=0x0) returned 0x60 [0186.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.241] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.241] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.241] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6b [0186.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.243] GetFileType (hFile=0x238) returned 0x1 [0186.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.243] GetFileType (hFile=0x238) returned 0x1 [0186.243] WriteFile (in: hFile=0x238, lpBuffer=0x26993b8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x26993b8*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0186.244] CloseHandle (hObject=0x238) returned 1 [0186.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\ENYBENY.png", lpFilePart=0x0) returned 0x6b [0186.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0186.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.246] GetFileType (hFile=0x238) returned 0x1 [0186.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0186.246] GetFileType (hFile=0x238) returned 0x1 [0186.246] WriteFile (in: hFile=0x238, lpBuffer=0x269a4c0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x269a4c0*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0186.248] CloseHandle (hObject=0x238) returned 1 [0186.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x96 [0186.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.250] GetFileType (hFile=0x238) returned 0x1 [0186.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.250] GetFileType (hFile=0x238) returned 0x1 [0186.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", lpFilePart=0x0) returned 0x5f [0186.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", lpFilePart=0x0) returned 0x60 [0186.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.252] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.252] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.252] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", lpFilePart=0x0) returned 0x5f [0186.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", lpFilePart=0x0) returned 0x60 [0186.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.253] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.253] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.253] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6b [0186.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.254] GetFileType (hFile=0x238) returned 0x1 [0186.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.254] GetFileType (hFile=0x238) returned 0x1 [0186.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\ENYBENY.png", lpFilePart=0x0) returned 0x6b [0186.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0186.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.257] GetFileType (hFile=0x238) returned 0x1 [0186.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0186.257] GetFileType (hFile=0x238) returned 0x1 [0186.257] WriteFile (in: hFile=0x238, lpBuffer=0x26aede8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26aede8*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0186.258] CloseHandle (hObject=0x238) returned 1 [0186.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x96 [0186.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.259] GetFileType (hFile=0x238) returned 0x1 [0186.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.259] GetFileType (hFile=0x238) returned 0x1 [0186.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ENYBENY.TXT", lpFilePart=0x0) returned 0x62 [0186.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0186.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.262] GetFileType (hFile=0x238) returned 0x1 [0186.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0186.262] GetFileType (hFile=0x238) returned 0x1 [0186.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ENYBENY.png", lpFilePart=0x0) returned 0x62 [0186.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0186.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.269] GetFileType (hFile=0x238) returned 0x1 [0186.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0186.269] GetFileType (hFile=0x238) returned 0x1 [0186.270] WriteFile (in: hFile=0x238, lpBuffer=0x26c10b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x26c10b0*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0186.271] CloseHandle (hObject=0x238) returned 1 [0186.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8d [0186.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0186.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0186.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5e [0186.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\ENYBENY.png", lpFilePart=0x0) returned 0x5e [0186.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0186.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x89 [0186.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\ENYBENY.TXT", lpFilePart=0x0) returned 0x55 [0186.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\ENYBENY.png", lpFilePart=0x0) returned 0x55 [0186.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0186.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x80 [0186.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x3b [0186.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x3c [0186.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.307] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.307] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.308] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x3b [0186.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x3c [0186.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.308] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.308] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.309] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\ENYBENY.TXT", lpFilePart=0x0) returned 0x47 [0186.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\ENYBENY.png", lpFilePart=0x0) returned 0x47 [0186.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0186.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x72 [0186.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x42 [0186.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", lpFilePart=0x0) returned 0x43 [0186.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.321] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.321] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.321] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x42 [0186.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", lpFilePart=0x0) returned 0x43 [0186.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.323] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.323] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0186.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", lpFilePart=0x0) returned 0x45 [0186.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", lpFilePart=0x0) returned 0x46 [0186.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0186.326] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.326] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.326] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0186.327] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0186.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0186.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0186.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", lpFilePart=0x0) returned 0x45 [0186.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", lpFilePart=0x0) returned 0x46 [0186.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0186.328] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.328] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.328] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0186.328] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0186.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0186.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", lpFilePart=0x0) returned 0x4a [0186.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", lpFilePart=0x0) returned 0x4b [0186.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0186.330] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.331] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.331] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0186.331] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0186.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0186.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", lpFilePart=0x0) returned 0x4a [0186.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", lpFilePart=0x0) returned 0x4b [0186.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0186.332] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.332] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.332] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0186.333] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0186.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0186.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\ENYBENY.TXT", lpFilePart=0x0) returned 0x56 [0186.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0186.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0186.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\ENYBENY.png", lpFilePart=0x0) returned 0x56 [0186.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0186.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0186.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x81 [0186.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0186.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0186.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\ENYBENY.TXT", lpFilePart=0x0) returned 0x51 [0186.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\ENYBENY.png", lpFilePart=0x0) returned 0x51 [0186.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0186.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7c [0186.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4e [0186.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\ENYBENY.png", lpFilePart=0x0) returned 0x4e [0186.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0186.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x79 [0186.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x3f [0186.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x40 [0186.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.392] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.392] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.392] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.393] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x3f [0186.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x40 [0186.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.394] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.394] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0186.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x4b [0186.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x4c [0186.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0186.394] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.395] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.395] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0186.395] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0186.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0186.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0186.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x4b [0186.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x4c [0186.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0186.396] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.396] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.396] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0186.396] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0186.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0186.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x4f [0186.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpFilePart=0x0) returned 0x50 [0186.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0186.397] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.397] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.397] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0186.398] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0186.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0186.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x4f [0186.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpFilePart=0x0) returned 0x50 [0186.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0186.398] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.398] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0186.399] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0186.399] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0186.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0186.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x5a [0186.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpFilePart=0x0) returned 0x5b [0186.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.400] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.400] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.400] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.400] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x5a [0186.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpFilePart=0x0) returned 0x5b [0186.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0186.401] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.401] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0186.401] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0186.401] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0186.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0186.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x66 [0186.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\ENYBENY.png", lpFilePart=0x0) returned 0x66 [0186.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0186.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0186.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x91 [0186.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0186.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0186.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5b [0186.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0186.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0186.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\ENYBENY.png", lpFilePart=0x0) returned 0x5b [0186.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0186.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0186.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x86 [0186.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0186.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0186.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\ENYBENY.TXT", lpFilePart=0x0) returned 0x57 [0186.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\ENYBENY.png", lpFilePart=0x0) returned 0x57 [0186.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0186.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x82 [0186.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0186.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0186.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0186.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0186.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x3e [0186.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3f [0186.520] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.538] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.538] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.538] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.538] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.538] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x3e [0186.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3f [0186.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.539] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.540] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.540] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.540] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.540] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0186.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x45 [0186.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpFilePart=0x0) returned 0x46 [0186.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0186.542] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.543] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0186.543] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0186.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0186.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0186.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x45 [0186.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpFilePart=0x0) returned 0x46 [0186.544] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0186.544] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.544] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.544] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.544] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0186.544] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0186.544] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0186.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0186.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\ENYBENY.TXT", lpFilePart=0x0) returned 0x51 [0186.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\ENYBENY.png", lpFilePart=0x0) returned 0x51 [0186.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0186.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0186.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7c [0186.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0186.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0186.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0186.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0186.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0186.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0186.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0186.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0186.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0186.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0186.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3f [0186.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x40 [0186.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.586] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.586] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.586] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.586] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.587] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0186.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3f [0186.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x40 [0186.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0186.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0186.587] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0186.587] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0186.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0186.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0186.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.EnyBenied", lpFilePart=0x0) returned 0x55 [0186.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0186.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0186.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0187.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0187.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0187.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0187.125] GetFileType (hFile=0x228) returned 0x1 [0187.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0187.125] GetFileType (hFile=0x228) returned 0x1 [0187.125] ReadFile (in: hFile=0x228, lpBuffer=0x2703658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2703658*, lpNumberOfBytesRead=0x1adc08*=0x9a2, lpOverlapped=0x0) returned 1 [0187.175] ReadFile (in: hFile=0x228, lpBuffer=0x27033e2, nNumberOfBytesToRead=0x25e, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27033e2*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0187.176] ReadFile (in: hFile=0x228, lpBuffer=0x2703658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2703658*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0187.176] CloseHandle (hObject=0x228) returned 1 [0187.176] WriteFile (in: hFile=0x238, lpBuffer=0x2701be8*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2701be8*, lpNumberOfBytesWritten=0x1adad8*=0x9d0, lpOverlapped=0x0) returned 1 [0187.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0187.177] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml")) returned 1 [0187.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0187.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.183] GetFileType (hFile=0x238) returned 0x1 [0187.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.183] GetFileType (hFile=0x238) returned 0x1 [0187.184] WriteFile (in: hFile=0x238, lpBuffer=0x270e5a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x270e5a0*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0187.185] CloseHandle (hObject=0x238) returned 1 [0187.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0187.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0187.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0187.187] GetFileType (hFile=0x238) returned 0x1 [0187.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0187.187] GetFileType (hFile=0x238) returned 0x1 [0187.187] WriteFile (in: hFile=0x238, lpBuffer=0x270f668*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x270f668*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0187.188] CloseHandle (hObject=0x238) returned 1 [0187.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0187.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.192] GetFileType (hFile=0x238) returned 0x1 [0187.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.192] GetFileType (hFile=0x238) returned 0x1 [0187.193] WriteFile (in: hFile=0x238, lpBuffer=0x27162e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x27162e0*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0187.194] CloseHandle (hObject=0x238) returned 1 [0187.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x42 [0187.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpFilePart=0x0) returned 0x43 [0187.194] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.196] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.196] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.196] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x42 [0187.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpFilePart=0x0) returned 0x43 [0187.196] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.197] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.197] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.197] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4e [0187.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.203] GetFileType (hFile=0x238) returned 0x1 [0187.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.203] GetFileType (hFile=0x238) returned 0x1 [0187.204] WriteFile (in: hFile=0x238, lpBuffer=0x2722788*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2722788*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0187.205] CloseHandle (hObject=0x238) returned 1 [0187.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\ENYBENY.png", lpFilePart=0x0) returned 0x4e [0187.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0187.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0187.207] GetFileType (hFile=0x238) returned 0x1 [0187.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0187.207] GetFileType (hFile=0x238) returned 0x1 [0187.207] WriteFile (in: hFile=0x238, lpBuffer=0x2723858*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2723858*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0187.208] CloseHandle (hObject=0x238) returned 1 [0187.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x79 [0187.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.210] GetFileType (hFile=0x238) returned 0x1 [0187.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.210] GetFileType (hFile=0x238) returned 0x1 [0187.210] WriteFile (in: hFile=0x238, lpBuffer=0x272a4e8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x272a4e8*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0187.211] CloseHandle (hObject=0x238) returned 1 [0187.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x3d [0187.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", lpFilePart=0x0) returned 0x3e [0187.211] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.277] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.278] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.278] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x3d [0187.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", lpFilePart=0x0) returned 0x3e [0187.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.279] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.279] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.279] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\ENYBENY.TXT", lpFilePart=0x0) returned 0x49 [0187.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.280] GetFileType (hFile=0x238) returned 0x1 [0187.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.280] GetFileType (hFile=0x238) returned 0x1 [0187.281] WriteFile (in: hFile=0x238, lpBuffer=0x2736840*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2736840*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0187.282] CloseHandle (hObject=0x238) returned 1 [0187.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\ENYBENY.png", lpFilePart=0x0) returned 0x49 [0187.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0187.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0187.283] GetFileType (hFile=0x238) returned 0x1 [0187.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0187.283] GetFileType (hFile=0x238) returned 0x1 [0187.283] WriteFile (in: hFile=0x238, lpBuffer=0x2737908*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2737908*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0187.284] CloseHandle (hObject=0x238) returned 1 [0187.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x74 [0187.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.285] GetFileType (hFile=0x238) returned 0x1 [0187.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.285] GetFileType (hFile=0x238) returned 0x1 [0187.286] WriteFile (in: hFile=0x238, lpBuffer=0x273e580*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x273e580*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0187.286] CloseHandle (hObject=0x238) returned 1 [0187.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x3f [0187.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x40 [0187.287] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.287] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.287] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.288] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x3f [0187.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x40 [0187.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.289] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.289] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.289] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.290] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.290] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.290] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.290] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0187.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x6d [0187.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x6e [0187.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0187.378] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.378] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.378] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.378] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0187.379] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0187.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0187.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0187.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x6d [0187.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x6e [0187.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0187.381] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.381] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.381] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.381] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0187.381] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0187.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0187.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\ENYBENY.TXT", lpFilePart=0x0) returned 0x79 [0187.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0187.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.384] GetFileType (hFile=0x238) returned 0x1 [0187.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0187.384] GetFileType (hFile=0x238) returned 0x1 [0187.385] WriteFile (in: hFile=0x238, lpBuffer=0x274f360*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x274f360*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0187.386] CloseHandle (hObject=0x238) returned 1 [0187.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\ENYBENY.png", lpFilePart=0x0) returned 0x79 [0187.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0187.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0187.387] GetFileType (hFile=0x238) returned 0x1 [0187.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0187.387] GetFileType (hFile=0x238) returned 0x1 [0187.387] WriteFile (in: hFile=0x238, lpBuffer=0x2750488*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2750488*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0187.389] CloseHandle (hObject=0x238) returned 1 [0187.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa4 [0187.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0187.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.390] GetFileType (hFile=0x238) returned 0x1 [0187.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0187.390] GetFileType (hFile=0x238) returned 0x1 [0187.390] WriteFile (in: hFile=0x238, lpBuffer=0x2757220*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2757220*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0187.392] CloseHandle (hObject=0x238) returned 1 [0187.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0187.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x6e [0187.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x6f [0187.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0187.392] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.393] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0187.393] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0187.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0187.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0187.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x6e [0187.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x6f [0187.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0187.394] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.394] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.394] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.394] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.394] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.395] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.395] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0187.395] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0187.395] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0187.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0187.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT", lpFilePart=0x0) returned 0x7a [0187.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0187.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.397] GetFileType (hFile=0x238) returned 0x1 [0187.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0187.397] GetFileType (hFile=0x238) returned 0x1 [0187.397] WriteFile (in: hFile=0x238, lpBuffer=0x27668f8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x27668f8*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0187.398] CloseHandle (hObject=0x238) returned 1 [0187.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png", lpFilePart=0x0) returned 0x7a [0187.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0187.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0187.400] GetFileType (hFile=0x238) returned 0x1 [0187.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0187.400] GetFileType (hFile=0x238) returned 0x1 [0187.400] WriteFile (in: hFile=0x238, lpBuffer=0x2767a20*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x2767a20*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0187.401] CloseHandle (hObject=0x238) returned 1 [0187.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xa5 [0187.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0187.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.407] GetFileType (hFile=0x238) returned 0x1 [0187.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0187.407] GetFileType (hFile=0x238) returned 0x1 [0187.407] WriteFile (in: hFile=0x238, lpBuffer=0x276e7b8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x276e7b8*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0187.409] CloseHandle (hObject=0x238) returned 1 [0187.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4b [0187.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.410] GetFileType (hFile=0x238) returned 0x1 [0187.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.410] GetFileType (hFile=0x238) returned 0x1 [0187.411] WriteFile (in: hFile=0x238, lpBuffer=0x2778bf0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2778bf0*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0187.412] CloseHandle (hObject=0x238) returned 1 [0187.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\ENYBENY.png", lpFilePart=0x0) returned 0x4b [0187.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0187.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0187.416] GetFileType (hFile=0x238) returned 0x1 [0187.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0187.416] GetFileType (hFile=0x238) returned 0x1 [0187.416] WriteFile (in: hFile=0x238, lpBuffer=0x2779cb8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2779cb8*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0187.418] CloseHandle (hObject=0x238) returned 1 [0187.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x76 [0187.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.420] GetFileType (hFile=0x238) returned 0x1 [0187.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.420] GetFileType (hFile=0x238) returned 0x1 [0187.420] WriteFile (in: hFile=0x238, lpBuffer=0x2780930*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2780930*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0187.421] CloseHandle (hObject=0x238) returned 1 [0187.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x41 [0187.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x42 [0187.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.548] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.548] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x41 [0187.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x42 [0187.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.549] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.549] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4d [0187.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.550] GetFileType (hFile=0x238) returned 0x1 [0187.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.550] GetFileType (hFile=0x238) returned 0x1 [0187.551] WriteFile (in: hFile=0x238, lpBuffer=0x278cd68*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x278cd68*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0187.552] CloseHandle (hObject=0x238) returned 1 [0187.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\ENYBENY.png", lpFilePart=0x0) returned 0x4d [0187.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0187.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0187.553] GetFileType (hFile=0x238) returned 0x1 [0187.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0187.553] GetFileType (hFile=0x238) returned 0x1 [0187.553] WriteFile (in: hFile=0x238, lpBuffer=0x278de38*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x278de38*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0187.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x78 [0187.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0187.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0187.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0187.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x51 [0187.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpFilePart=0x0) returned 0x52 [0187.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.624] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.624] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.624] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.625] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0187.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x51 [0187.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpFilePart=0x0) returned 0x52 [0187.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0187.625] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.626] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0187.626] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0187.626] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0187.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0187.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0187.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.EnyBenied", lpFilePart=0x0) returned 0x6c [0187.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0187.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0187.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0188.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0188.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0188.213] GetFileType (hFile=0x228) returned 0x1 [0188.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.213] GetFileType (hFile=0x228) returned 0x1 [0188.213] ReadFile (in: hFile=0x228, lpBuffer=0x26dede0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dede0*, lpNumberOfBytesRead=0x1adc08*=0xa8, lpOverlapped=0x0) returned 1 [0188.215] ReadFile (in: hFile=0x228, lpBuffer=0x26dede0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dede0*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0188.215] CloseHandle (hObject=0x228) returned 1 [0188.215] WriteFile (in: hFile=0x238, lpBuffer=0x26dd330*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26dd330*, lpNumberOfBytesWritten=0x1adad8*=0xd0, lpOverlapped=0x0) returned 1 [0188.216] CloseHandle (hObject=0x238) returned 1 [0188.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0188.217] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml")) returned 1 [0188.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5d [0188.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.222] GetFileType (hFile=0x238) returned 0x1 [0188.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.222] GetFileType (hFile=0x238) returned 0x1 [0188.222] WriteFile (in: hFile=0x238, lpBuffer=0x26e9470*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26e9470*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0188.224] CloseHandle (hObject=0x238) returned 1 [0188.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ENYBENY.png", lpFilePart=0x0) returned 0x5d [0188.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.225] GetFileType (hFile=0x238) returned 0x1 [0188.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0188.225] GetFileType (hFile=0x238) returned 0x1 [0188.225] WriteFile (in: hFile=0x238, lpBuffer=0x26ea560*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26ea560*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0188.227] CloseHandle (hObject=0x238) returned 1 [0188.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x88 [0188.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.238] GetFileType (hFile=0x238) returned 0x1 [0188.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.238] GetFileType (hFile=0x238) returned 0x1 [0188.239] WriteFile (in: hFile=0x238, lpBuffer=0x26f1250*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26f1250*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0188.240] CloseHandle (hObject=0x238) returned 1 [0188.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x3e [0188.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", lpFilePart=0x0) returned 0x3f [0188.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.241] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.241] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.241] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x3e [0188.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", lpFilePart=0x0) returned 0x3f [0188.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.242] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.242] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.242] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0188.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.246] GetFileType (hFile=0x238) returned 0x1 [0188.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.246] GetFileType (hFile=0x238) returned 0x1 [0188.246] WriteFile (in: hFile=0x238, lpBuffer=0x26fd618*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x26fd618*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0188.247] CloseHandle (hObject=0x238) returned 1 [0188.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0188.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.249] GetFileType (hFile=0x238) returned 0x1 [0188.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0188.249] GetFileType (hFile=0x238) returned 0x1 [0188.249] WriteFile (in: hFile=0x238, lpBuffer=0x26fe6e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26fe6e0*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0188.250] CloseHandle (hObject=0x238) returned 1 [0188.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0188.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.252] GetFileType (hFile=0x238) returned 0x1 [0188.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.252] GetFileType (hFile=0x238) returned 0x1 [0188.252] WriteFile (in: hFile=0x238, lpBuffer=0x2705358*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2705358*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0188.253] CloseHandle (hObject=0x238) returned 1 [0188.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x4a [0188.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x4b [0188.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.254] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.254] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.254] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.254] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x4a [0188.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x4b [0188.255] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.255] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.255] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x4d [0188.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x4e [0188.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0188.256] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.256] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.257] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.257] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.257] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0188.257] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0188.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0188.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x4d [0188.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x4e [0188.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0188.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.258] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0188.258] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0188.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0188.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x5a [0188.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x5b [0188.259] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0188.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.259] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0188.259] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0188.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x5a [0188.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x5b [0188.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0188.260] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.260] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0188.260] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0188.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\ENYBENY.TXT", lpFilePart=0x0) returned 0x66 [0188.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0188.265] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.266] GetFileType (hFile=0x238) returned 0x1 [0188.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0188.267] GetFileType (hFile=0x238) returned 0x1 [0188.267] WriteFile (in: hFile=0x238, lpBuffer=0x2717248*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2717248*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0188.268] CloseHandle (hObject=0x238) returned 1 [0188.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\ENYBENY.png", lpFilePart=0x0) returned 0x66 [0188.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0188.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.270] GetFileType (hFile=0x238) returned 0x1 [0188.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0188.270] GetFileType (hFile=0x238) returned 0x1 [0188.270] WriteFile (in: hFile=0x238, lpBuffer=0x2718348*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2718348*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0188.271] CloseHandle (hObject=0x238) returned 1 [0188.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x91 [0188.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0188.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.273] GetFileType (hFile=0x238) returned 0x1 [0188.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0188.273] GetFileType (hFile=0x238) returned 0x1 [0188.273] WriteFile (in: hFile=0x238, lpBuffer=0x271f068*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x271f068*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0188.274] CloseHandle (hObject=0x238) returned 1 [0188.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x52 [0188.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x53 [0188.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0188.275] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.276] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0188.276] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0188.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x52 [0188.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x53 [0188.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0188.277] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.277] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0188.278] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0188.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5e [0188.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0188.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.279] GetFileType (hFile=0x238) returned 0x1 [0188.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0188.279] GetFileType (hFile=0x238) returned 0x1 [0188.280] WriteFile (in: hFile=0x238, lpBuffer=0x272b890*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x272b890*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0188.281] CloseHandle (hObject=0x238) returned 1 [0188.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\ENYBENY.png", lpFilePart=0x0) returned 0x5e [0188.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0188.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.282] GetFileType (hFile=0x238) returned 0x1 [0188.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0188.282] GetFileType (hFile=0x238) returned 0x1 [0188.282] WriteFile (in: hFile=0x238, lpBuffer=0x272c980*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x272c980*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0188.284] CloseHandle (hObject=0x238) returned 1 [0188.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x89 [0188.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0188.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.285] GetFileType (hFile=0x238) returned 0x1 [0188.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0188.285] GetFileType (hFile=0x238) returned 0x1 [0188.286] WriteFile (in: hFile=0x238, lpBuffer=0x2733670*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2733670*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0188.287] CloseHandle (hObject=0x238) returned 1 [0188.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x52 [0188.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x53 [0188.287] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0188.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.288] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0188.288] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0188.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x52 [0188.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x53 [0188.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0188.289] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.289] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0188.290] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0188.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\ENYBENY.TXT", lpFilePart=0x0) returned 0x5e [0188.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0188.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.291] GetFileType (hFile=0x238) returned 0x1 [0188.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0188.291] GetFileType (hFile=0x238) returned 0x1 [0188.292] WriteFile (in: hFile=0x238, lpBuffer=0x273fe98*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x273fe98*, lpNumberOfBytesWritten=0x1ada18*=0x394, lpOverlapped=0x0) returned 1 [0188.293] CloseHandle (hObject=0x238) returned 1 [0188.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\ENYBENY.png", lpFilePart=0x0) returned 0x5e [0188.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0188.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.295] GetFileType (hFile=0x238) returned 0x1 [0188.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0188.295] GetFileType (hFile=0x238) returned 0x1 [0188.295] WriteFile (in: hFile=0x238, lpBuffer=0x2740f88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adb58, lpOverlapped=0x0 | out: lpBuffer=0x2740f88*, lpNumberOfBytesWritten=0x1adb58*=0x50df, lpOverlapped=0x0) returned 1 [0188.297] CloseHandle (hObject=0x238) returned 1 [0188.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x89 [0188.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0188.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.299] GetFileType (hFile=0x238) returned 0x1 [0188.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0188.299] GetFileType (hFile=0x238) returned 0x1 [0188.299] WriteFile (in: hFile=0x238, lpBuffer=0x2747c78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada18, lpOverlapped=0x0 | out: lpBuffer=0x2747c78*, lpNumberOfBytesWritten=0x1ada18*=0xc6, lpOverlapped=0x0) returned 1 [0188.300] CloseHandle (hObject=0x238) returned 1 [0188.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\ENYBENY.TXT", lpFilePart=0x0) returned 0x59 [0188.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0188.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.303] GetFileType (hFile=0x238) returned 0x1 [0188.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0188.303] GetFileType (hFile=0x238) returned 0x1 [0188.303] WriteFile (in: hFile=0x238, lpBuffer=0x27520f0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x27520f0*, lpNumberOfBytesWritten=0x1ada98*=0x394, lpOverlapped=0x0) returned 1 [0188.305] CloseHandle (hObject=0x238) returned 1 [0188.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\ENYBENY.png", lpFilePart=0x0) returned 0x59 [0188.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0188.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.307] GetFileType (hFile=0x238) returned 0x1 [0188.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0188.307] GetFileType (hFile=0x238) returned 0x1 [0188.308] WriteFile (in: hFile=0x238, lpBuffer=0x27531d8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x27531d8*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0188.310] CloseHandle (hObject=0x238) returned 1 [0188.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x84 [0188.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0188.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.333] GetFileType (hFile=0x238) returned 0x1 [0188.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0188.333] GetFileType (hFile=0x238) returned 0x1 [0188.333] WriteFile (in: hFile=0x238, lpBuffer=0x2759eb0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x2759eb0*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0188.334] CloseHandle (hObject=0x238) returned 1 [0188.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\ENYBENY.TXT", lpFilePart=0x0) returned 0x56 [0188.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.336] GetFileType (hFile=0x238) returned 0x1 [0188.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.336] GetFileType (hFile=0x238) returned 0x1 [0188.336] WriteFile (in: hFile=0x238, lpBuffer=0x2764318*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x2764318*, lpNumberOfBytesWritten=0x1adb18*=0x394, lpOverlapped=0x0) returned 1 [0188.337] CloseHandle (hObject=0x238) returned 1 [0188.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\ENYBENY.png", lpFilePart=0x0) returned 0x56 [0188.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.339] GetFileType (hFile=0x238) returned 0x1 [0188.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0188.339] GetFileType (hFile=0x238) returned 0x1 [0188.339] WriteFile (in: hFile=0x238, lpBuffer=0x27653f8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x27653f8*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0188.341] CloseHandle (hObject=0x238) returned 1 [0188.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x81 [0188.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.361] GetFileType (hFile=0x238) returned 0x1 [0188.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.361] GetFileType (hFile=0x238) returned 0x1 [0188.361] WriteFile (in: hFile=0x238, lpBuffer=0x276c0b8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb18, lpOverlapped=0x0 | out: lpBuffer=0x276c0b8*, lpNumberOfBytesWritten=0x1adb18*=0xc6, lpOverlapped=0x0) returned 1 [0188.362] CloseHandle (hObject=0x238) returned 1 [0188.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x41 [0188.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x42 [0188.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.364] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.364] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.365] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x41 [0188.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x42 [0188.365] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.366] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4d [0188.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\ENYBENY.png", lpFilePart=0x0) returned 0x4d [0188.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0188.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x78 [0188.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x3e [0188.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", lpFilePart=0x0) returned 0x3f [0188.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.431] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.431] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.431] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.431] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x3e [0188.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", lpFilePart=0x0) returned 0x3f [0188.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.432] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.432] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.432] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.433] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4a [0188.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\ENYBENY.png", lpFilePart=0x0) returned 0x4a [0188.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0188.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x75 [0188.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x3c [0188.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x3d [0188.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.508] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.508] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x3c [0188.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x3d [0188.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.509] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.511] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x44 [0188.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpFilePart=0x0) returned 0x45 [0188.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0188.512] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.513] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0188.513] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0188.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0188.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x44 [0188.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpFilePart=0x0) returned 0x45 [0188.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0188.514] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.514] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0188.514] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0188.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0188.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\ENYBENY.TXT", lpFilePart=0x0) returned 0x50 [0188.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0188.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0188.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\ENYBENY.png", lpFilePart=0x0) returned 0x50 [0188.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0188.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0188.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7b [0188.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0188.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0188.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\ENYBENY.TXT", lpFilePart=0x0) returned 0x48 [0188.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\ENYBENY.png", lpFilePart=0x0) returned 0x48 [0188.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0188.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x73 [0188.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\ENYBENY.TXT", lpFilePart=0x0) returned 0x43 [0188.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0188.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0188.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\ENYBENY.png", lpFilePart=0x0) returned 0x43 [0188.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0188.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6e [0188.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0188.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0188.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0188.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x35 [0188.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", lpFilePart=0x0) returned 0x36 [0188.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0188.639] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0188.639] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0188.639] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0188.639] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0188.639] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0188.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0188.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0188.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x35 [0188.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", lpFilePart=0x0) returned 0x36 [0188.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0188.640] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0188.640] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0188.640] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0188.640] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0188.640] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0188.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0188.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x40 [0188.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", lpFilePart=0x0) returned 0x41 [0188.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.642] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.642] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.642] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x40 [0188.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", lpFilePart=0x0) returned 0x41 [0188.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.643] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.643] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4c [0188.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\ENYBENY.png", lpFilePart=0x0) returned 0x4c [0188.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0188.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x77 [0188.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0188.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0188.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3d [0188.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3e [0188.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.652] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.653] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.653] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.653] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.653] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.654] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0188.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3d [0188.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3e [0188.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0188.655] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.655] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.655] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.655] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0188.656] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0188.656] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0188.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0188.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x4b [0188.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpFilePart=0x0) returned 0x4c [0188.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0188.658] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.658] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.658] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0188.659] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0188.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0188.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x4b [0188.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpFilePart=0x0) returned 0x4c [0188.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0188.660] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.660] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.660] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0188.660] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0188.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0188.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\ENYBENY.TXT", lpFilePart=0x0) returned 0x57 [0188.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0188.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0188.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\ENYBENY.png", lpFilePart=0x0) returned 0x57 [0188.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0188.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0188.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x82 [0188.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0188.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0188.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0188.749] WriteFile (in: hFile=0x238, lpBuffer=0x25fdb08*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ada98, lpOverlapped=0x0 | out: lpBuffer=0x25fdb08*, lpNumberOfBytesWritten=0x1ada98*=0xc6, lpOverlapped=0x0) returned 1 [0188.750] CloseHandle (hObject=0x238) returned 1 [0188.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x46 [0188.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x47 [0188.750] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0188.751] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.751] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.751] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0188.752] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0188.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0188.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0188.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x46 [0188.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x47 [0188.752] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2e0780 [0188.752] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.753] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0188.753] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0188.753] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0188.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0188.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x57 [0188.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x58 [0188.754] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0188.756] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.758] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.758] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.758] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.758] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.759] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.759] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.759] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.759] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.759] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.759] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.760] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.760] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.760] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.761] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.761] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.761] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.761] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.761] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.761] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.762] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.762] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.762] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.762] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.762] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.762] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.762] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.763] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0188.763] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0188.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0188.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x1ad620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x57 [0188.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x1ad5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x58 [0188.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x1ad7d0 | out: lpFindFileData=0x1ad7d0) returned 0x2e0780 [0188.766] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.766] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.766] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.766] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.766] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.766] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.767] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.767] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.767] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.767] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.767] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.767] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.768] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.768] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.768] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.768] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.768] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.768] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.768] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.769] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.770] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.770] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.770] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 1 [0188.770] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad820 | out: lpFindFileData=0x1ad820) returned 0 [0188.770] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0188.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada80) returned 1 [0188.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0188.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.EnyBenied", lpFilePart=0x0) returned 0x6a [0188.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0188.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0188.774] GetFileType (hFile=0x238) returned 0x1 [0188.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0188.774] GetFileType (hFile=0x238) returned 0x1 [0189.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", lpFilePart=0x0) returned 0x60 [0189.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0189.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0189.392] GetFileType (hFile=0x228) returned 0x1 [0189.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0189.392] GetFileType (hFile=0x228) returned 0x1 [0189.392] ReadFile (in: hFile=0x228, lpBuffer=0x2754b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x2754b48*, lpNumberOfBytesRead=0x1adb08*=0xfde, lpOverlapped=0x0) returned 1 [0189.396] ReadFile (in: hFile=0x228, lpBuffer=0x2754b0e, nNumberOfBytesToRead=0x22, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x2754b0e*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0189.397] ReadFile (in: hFile=0x228, lpBuffer=0x2754b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x2754b48*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0189.397] CloseHandle (hObject=0x228) returned 1 [0189.397] WriteFile (in: hFile=0x238, lpBuffer=0x27530a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x27530a8*, lpNumberOfBytesWritten=0x1ad9d8*=0x1000, lpOverlapped=0x0) returned 1 [0189.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x1ad600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", lpFilePart=0x0) returned 0x60 [0189.399] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js")) returned 1 [0189.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.EnyBenied", lpFilePart=0x0) returned 0x71 [0189.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0189.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0189.403] GetFileType (hFile=0x238) returned 0x1 [0189.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0189.403] GetFileType (hFile=0x238) returned 0x1 [0189.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x1ad4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", lpFilePart=0x0) returned 0x67 [0189.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9d0) returned 1 [0189.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0189.987] GetFileType (hFile=0x228) returned 0x1 [0189.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0189.987] GetFileType (hFile=0x228) returned 0x1 [0189.987] ReadFile (in: hFile=0x228, lpBuffer=0x2681f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x2681f08*, lpNumberOfBytesRead=0x1adb08*=0xbc5, lpOverlapped=0x0) returned 1 [0190.011] ReadFile (in: hFile=0x228, lpBuffer=0x2681eb5, nNumberOfBytesToRead=0x3b, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x2681eb5*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0190.012] ReadFile (in: hFile=0x228, lpBuffer=0x2681f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb08, lpOverlapped=0x0 | out: lpBuffer=0x2681f08*, lpNumberOfBytesRead=0x1adb08*=0x0, lpOverlapped=0x0) returned 1 [0190.013] CloseHandle (hObject=0x228) returned 1 [0190.013] WriteFile (in: hFile=0x238, lpBuffer=0x2680458*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x2680458*, lpNumberOfBytesWritten=0x1ad9d8*=0xbf0, lpOverlapped=0x0) returned 1 [0190.014] CloseHandle (hObject=0x238) returned 1 [0190.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x1ad600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", lpFilePart=0x0) returned 0x67 [0190.014] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js")) returned 1 [0190.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", lpFilePart=0x0) returned 0x67 [0190.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", lpFilePart=0x0) returned 0x68 [0190.016] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0190.018] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.019] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.019] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.019] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0190.019] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0190.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0190.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", lpFilePart=0x0) returned 0x67 [0190.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", lpFilePart=0x0) returned 0x68 [0190.020] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0190.021] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.022] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.022] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.022] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0190.022] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0190.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0190.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\ENYBENY.TXT", lpFilePart=0x0) returned 0x73 [0190.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0190.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.028] GetFileType (hFile=0x238) returned 0x1 [0190.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0190.028] GetFileType (hFile=0x238) returned 0x1 [0190.029] WriteFile (in: hFile=0x238, lpBuffer=0x26906d0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x26906d0*, lpNumberOfBytesWritten=0x1ad998*=0x394, lpOverlapped=0x0) returned 1 [0190.030] CloseHandle (hObject=0x238) returned 1 [0190.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\ENYBENY.png", lpFilePart=0x0) returned 0x73 [0190.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0190.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.031] GetFileType (hFile=0x238) returned 0x1 [0190.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0190.031] GetFileType (hFile=0x238) returned 0x1 [0190.031] WriteFile (in: hFile=0x238, lpBuffer=0x26917e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26917e8*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0190.033] CloseHandle (hObject=0x238) returned 1 [0190.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x9e [0190.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0190.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.034] GetFileType (hFile=0x238) returned 0x1 [0190.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0190.034] GetFileType (hFile=0x238) returned 0x1 [0190.034] WriteFile (in: hFile=0x238, lpBuffer=0x2698550*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad998, lpOverlapped=0x0 | out: lpBuffer=0x2698550*, lpNumberOfBytesWritten=0x1ad998*=0xc6, lpOverlapped=0x0) returned 1 [0190.035] CloseHandle (hObject=0x238) returned 1 [0190.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", lpFilePart=0x0) returned 0x61 [0190.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", lpFilePart=0x0) returned 0x62 [0190.036] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0190.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0190.038] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0190.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0190.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", lpFilePart=0x0) returned 0x61 [0190.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", lpFilePart=0x0) returned 0x62 [0190.038] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0190.038] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.038] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.039] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0190.039] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0190.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0190.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0190.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", lpFilePart=0x0) returned 0x75 [0190.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", lpFilePart=0x0) returned 0x76 [0190.039] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0190.040] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0190.040] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0190.040] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0190.040] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0190.040] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0190.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0190.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0190.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", nBufferLength=0x105, lpBuffer=0x1ad520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", lpFilePart=0x0) returned 0x75 [0190.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", nBufferLength=0x105, lpBuffer=0x1ad4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", lpFilePart=0x0) returned 0x76 [0190.041] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x1ad6d0 | out: lpFindFileData=0x1ad6d0) returned 0x2e0780 [0190.041] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0190.041] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0190.042] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 1 [0190.042] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad720 | out: lpFindFileData=0x1ad720) returned 0 [0190.042] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad980) returned 1 [0190.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad940) returned 1 [0190.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0190.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", lpFilePart=0x0) returned 0x79 [0190.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", lpFilePart=0x0) returned 0x7a [0190.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0190.049] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0190.049] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0190.049] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0190.049] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0190.049] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0190.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0190.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0190.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", nBufferLength=0x105, lpBuffer=0x1ad4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", lpFilePart=0x0) returned 0x79 [0190.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", nBufferLength=0x105, lpBuffer=0x1ad440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", lpFilePart=0x0) returned 0x7a [0190.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x1ad650 | out: lpFindFileData=0x1ad650) returned 0x2e0780 [0190.052] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0190.052] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0190.052] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 1 [0190.053] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad6a0 | out: lpFindFileData=0x1ad6a0) returned 0 [0190.053] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad900) returned 1 [0190.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8c0) returned 1 [0190.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0190.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpFilePart=0x0) returned 0x8c [0190.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", lpFilePart=0x0) returned 0x8d [0190.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0780 [0190.058] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0190.058] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0190.059] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0190.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0190.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0190.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", nBufferLength=0x105, lpBuffer=0x1ad420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpFilePart=0x0) returned 0x8c [0190.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", nBufferLength=0x105, lpBuffer=0x1ad3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", lpFilePart=0x0) returned 0x8d [0190.059] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x1ad5d0 | out: lpFindFileData=0x1ad5d0) returned 0x2e0780 [0190.059] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 1 [0190.059] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad620 | out: lpFindFileData=0x1ad620) returned 0 [0190.059] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad880) returned 1 [0190.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad840) returned 1 [0190.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\ENYBENY.TXT", lpFilePart=0x0) returned 0x98 [0190.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0190.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.065] GetFileType (hFile=0x238) returned 0x1 [0190.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0190.065] GetFileType (hFile=0x238) returned 0x1 [0190.065] WriteFile (in: hFile=0x238, lpBuffer=0x26af5c8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x26af5c8*, lpNumberOfBytesWritten=0x1ad818*=0x394, lpOverlapped=0x0) returned 1 [0190.066] CloseHandle (hObject=0x238) returned 1 [0190.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\ENYBENY.png", lpFilePart=0x0) returned 0x98 [0190.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad830) returned 1 [0190.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.068] GetFileType (hFile=0x238) returned 0x1 [0190.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7a0) returned 1 [0190.068] GetFileType (hFile=0x238) returned 0x1 [0190.068] WriteFile (in: hFile=0x238, lpBuffer=0x26b0730*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad958, lpOverlapped=0x0 | out: lpBuffer=0x26b0730*, lpNumberOfBytesWritten=0x1ad958*=0x50df, lpOverlapped=0x0) returned 1 [0190.069] CloseHandle (hObject=0x238) returned 1 [0190.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xc3 [0190.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad770) returned 1 [0190.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.071] GetFileType (hFile=0x238) returned 0x1 [0190.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad6e0) returned 1 [0190.071] GetFileType (hFile=0x238) returned 0x1 [0190.071] WriteFile (in: hFile=0x238, lpBuffer=0x26b7578*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1ad818, lpOverlapped=0x0 | out: lpBuffer=0x26b7578*, lpNumberOfBytesWritten=0x1ad818*=0xc6, lpOverlapped=0x0) returned 1 [0190.072] CloseHandle (hObject=0x238) returned 1 [0190.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\ENYBENY.TXT", lpFilePart=0x0) returned 0x85 [0190.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0190.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.074] GetFileType (hFile=0x238) returned 0x1 [0190.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0190.074] GetFileType (hFile=0x238) returned 0x1 [0190.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\ENYBENY.png", lpFilePart=0x0) returned 0x85 [0190.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8b0) returned 1 [0190.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.077] GetFileType (hFile=0x238) returned 0x1 [0190.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad820) returned 1 [0190.077] GetFileType (hFile=0x238) returned 0x1 [0190.077] WriteFile (in: hFile=0x238, lpBuffer=0x26c2be0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ad9d8, lpOverlapped=0x0 | out: lpBuffer=0x26c2be0*, lpNumberOfBytesWritten=0x1ad9d8*=0x50df, lpOverlapped=0x0) returned 1 [0190.078] CloseHandle (hObject=0x238) returned 1 [0190.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xb0 [0190.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad7f0) returned 1 [0190.079] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.080] GetFileType (hFile=0x238) returned 0x1 [0190.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad760) returned 1 [0190.080] GetFileType (hFile=0x238) returned 0x1 [0190.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\ENYBENY.TXT", lpFilePart=0x0) returned 0x81 [0190.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0190.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.083] GetFileType (hFile=0x238) returned 0x1 [0190.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0190.083] GetFileType (hFile=0x238) returned 0x1 [0190.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\ENYBENY.png", lpFilePart=0x0) returned 0x81 [0190.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad930) returned 1 [0190.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.085] GetFileType (hFile=0x238) returned 0x1 [0190.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8a0) returned 1 [0190.085] GetFileType (hFile=0x238) returned 0x1 [0190.086] WriteFile (in: hFile=0x238, lpBuffer=0x26d5010*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ada58, lpOverlapped=0x0 | out: lpBuffer=0x26d5010*, lpNumberOfBytesWritten=0x1ada58*=0x50df, lpOverlapped=0x0) returned 1 [0190.088] CloseHandle (hObject=0x238) returned 1 [0190.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0xac [0190.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad870) returned 1 [0190.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.105] GetFileType (hFile=0x238) returned 0x1 [0190.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad7e0) returned 1 [0190.105] GetFileType (hFile=0x238) returned 0x1 [0190.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6d [0190.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0190.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.107] GetFileType (hFile=0x238) returned 0x1 [0190.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0190.107] GetFileType (hFile=0x238) returned 0x1 [0190.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\ENYBENY.png", lpFilePart=0x0) returned 0x6d [0190.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0190.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.110] GetFileType (hFile=0x238) returned 0x1 [0190.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0190.110] GetFileType (hFile=0x238) returned 0x1 [0190.110] WriteFile (in: hFile=0x238, lpBuffer=0x26e73b0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26e73b0*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0190.111] CloseHandle (hObject=0x238) returned 1 [0190.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x98 [0190.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0190.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.121] GetFileType (hFile=0x238) returned 0x1 [0190.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0190.121] GetFileType (hFile=0x238) returned 0x1 [0190.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", lpFilePart=0x0) returned 0x61 [0190.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", lpFilePart=0x0) returned 0x62 [0190.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0190.123] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.123] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0190.123] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0190.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0190.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", lpFilePart=0x0) returned 0x61 [0190.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", lpFilePart=0x0) returned 0x62 [0190.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0190.124] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.124] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0190.124] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0190.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0190.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6d [0190.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0190.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.125] GetFileType (hFile=0x238) returned 0x1 [0190.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0190.125] GetFileType (hFile=0x238) returned 0x1 [0190.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\ENYBENY.png", lpFilePart=0x0) returned 0x6d [0190.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0190.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.127] GetFileType (hFile=0x238) returned 0x1 [0190.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0190.127] GetFileType (hFile=0x238) returned 0x1 [0190.127] WriteFile (in: hFile=0x238, lpBuffer=0x26fbd48*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x26fbd48*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0190.129] CloseHandle (hObject=0x238) returned 1 [0190.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x98 [0190.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0190.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.130] GetFileType (hFile=0x238) returned 0x1 [0190.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0190.130] GetFileType (hFile=0x238) returned 0x1 [0190.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", lpFilePart=0x0) returned 0x5f [0190.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", lpFilePart=0x0) returned 0x60 [0190.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0190.132] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.133] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.133] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0190.133] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0190.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0190.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", nBufferLength=0x105, lpBuffer=0x1ad5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", lpFilePart=0x0) returned 0x5f [0190.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", nBufferLength=0x105, lpBuffer=0x1ad540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", lpFilePart=0x0) returned 0x60 [0190.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x1ad750 | out: lpFindFileData=0x1ad750) returned 0x2e0780 [0190.133] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.134] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 1 [0190.134] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad7a0 | out: lpFindFileData=0x1ad7a0) returned 0 [0190.134] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada00) returned 1 [0190.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0190.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\ENYBENY.TXT", lpFilePart=0x0) returned 0x6b [0190.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0190.134] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.135] GetFileType (hFile=0x238) returned 0x1 [0190.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0190.135] GetFileType (hFile=0x238) returned 0x1 [0190.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\ENYBENY.png", lpFilePart=0x0) returned 0x6b [0190.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9b0) returned 1 [0190.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.137] GetFileType (hFile=0x238) returned 0x1 [0190.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad920) returned 1 [0190.138] GetFileType (hFile=0x238) returned 0x1 [0190.138] WriteFile (in: hFile=0x238, lpBuffer=0x2710c80*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adad8, lpOverlapped=0x0 | out: lpBuffer=0x2710c80*, lpNumberOfBytesWritten=0x1adad8*=0x50df, lpOverlapped=0x0) returned 1 [0190.139] CloseHandle (hObject=0x238) returned 1 [0190.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x96 [0190.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad8f0) returned 1 [0190.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.170] GetFileType (hFile=0x238) returned 0x1 [0190.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad860) returned 1 [0190.170] GetFileType (hFile=0x238) returned 0x1 [0190.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.TXT", lpFilePart=0x0) returned 0x63 [0190.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0190.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.172] GetFileType (hFile=0x238) returned 0x1 [0190.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0190.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.png", lpFilePart=0x0) returned 0x63 [0190.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada30) returned 1 [0190.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9a0) returned 1 [0190.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8e [0190.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad970) returned 1 [0190.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad8e0) returned 1 [0190.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\ENYBENY.TXT", lpFilePart=0x0) returned 0x52 [0190.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0190.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0190.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\ENYBENY.png", lpFilePart=0x0) returned 0x52 [0190.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0190.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0190.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7d [0190.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0190.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0190.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\ENYBENY.TXT", lpFilePart=0x0) returned 0x49 [0190.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0190.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0190.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\ENYBENY.png", lpFilePart=0x0) returned 0x49 [0190.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0190.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0190.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x74 [0190.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0190.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0190.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\ENYBENY.TXT", lpFilePart=0x0) returned 0x41 [0190.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0190.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0190.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\ENYBENY.png", lpFilePart=0x0) returned 0x41 [0190.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0190.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0190.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6c [0190.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0190.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0190.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ENYBENY.TXT", lpFilePart=0x0) returned 0x39 [0190.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0190.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0190.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ENYBENY.png", lpFilePart=0x0) returned 0x39 [0190.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0190.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0190.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x64 [0190.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0190.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0190.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0190.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0190.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0190.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0190.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0190.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0190.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0190.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0190.307] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0190.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0190.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0190.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", lpFilePart=0x0) returned 0x2f [0190.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0190.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0190.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3a [0190.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0190.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.330] GetFileType (hFile=0x238) returned 0x1 [0190.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0190.330] GetFileType (hFile=0x238) returned 0x1 [0190.331] WriteFile (in: hFile=0x238, lpBuffer=0x278f988*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x278f988*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0190.332] CloseHandle (hObject=0x238) returned 1 [0190.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\ENYBENY.png", lpFilePart=0x0) returned 0x3a [0190.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0190.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.333] GetFileType (hFile=0x238) returned 0x1 [0190.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0190.334] GetFileType (hFile=0x238) returned 0x1 [0190.334] WriteFile (in: hFile=0x238, lpBuffer=0x2790a30*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2790a30*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0190.335] CloseHandle (hObject=0x238) returned 1 [0190.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x65 [0190.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0190.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.337] GetFileType (hFile=0x238) returned 0x1 [0190.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0190.337] GetFileType (hFile=0x238) returned 0x1 [0190.337] WriteFile (in: hFile=0x238, lpBuffer=0x2797648*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2797648*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0190.338] CloseHandle (hObject=0x238) returned 1 [0190.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0190.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0190.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27 [0190.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0190.338] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.338] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.339] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.339] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.339] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.339] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.339] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.339] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.339] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0190.340] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0190.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0190.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0190.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0190.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27 [0190.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0190.340] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.340] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.341] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.341] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.341] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.341] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.341] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.341] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.342] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0190.342] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0190.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0190.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\ENYBENY.TXT", lpFilePart=0x0) returned 0x32 [0190.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0190.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.345] GetFileType (hFile=0x238) returned 0x1 [0190.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0190.345] GetFileType (hFile=0x238) returned 0x1 [0190.345] WriteFile (in: hFile=0x238, lpBuffer=0x27a5200*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27a5200*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0190.346] CloseHandle (hObject=0x238) returned 1 [0190.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\ENYBENY.png", lpFilePart=0x0) returned 0x32 [0190.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0190.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.347] GetFileType (hFile=0x238) returned 0x1 [0190.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0190.347] GetFileType (hFile=0x238) returned 0x1 [0190.347] WriteFile (in: hFile=0x238, lpBuffer=0x27a6298*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x27a6298*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0190.349] CloseHandle (hObject=0x238) returned 1 [0190.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5d [0190.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0190.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.350] GetFileType (hFile=0x238) returned 0x1 [0190.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0190.350] GetFileType (hFile=0x238) returned 0x1 [0190.350] WriteFile (in: hFile=0x238, lpBuffer=0x27ace80*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27ace80*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0190.352] CloseHandle (hObject=0x238) returned 1 [0190.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0190.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0190.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", lpFilePart=0x0) returned 0x26 [0190.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0190.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0190.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0190.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0190.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.357] GetFileType (hFile=0x238) returned 0x1 [0190.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0190.357] GetFileType (hFile=0x238) returned 0x1 [0190.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0190.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0190.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.360] GetFileType (hFile=0x238) returned 0x1 [0190.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0190.360] GetFileType (hFile=0x238) returned 0x1 [0190.360] WriteFile (in: hFile=0x238, lpBuffer=0x27b95f0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x27b95f0*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0190.362] CloseHandle (hObject=0x238) returned 1 [0190.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0190.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0190.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0190.363] GetFileType (hFile=0x238) returned 0x1 [0190.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0190.363] GetFileType (hFile=0x238) returned 0x1 [0190.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0190.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0190.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0190.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0190.364] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.364] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.364] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.365] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.366] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.369] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.369] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.369] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.369] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.369] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.369] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.370] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.371] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.371] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.371] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.371] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.371] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0190.371] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0190.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0190.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0190.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0190.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0190.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0190.372] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.372] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.372] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.372] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.373] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.373] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.373] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.373] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.373] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.373] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.373] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.373] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.374] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.374] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.374] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.374] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.374] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.374] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.374] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.375] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.375] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.375] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.375] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.375] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.375] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.375] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.376] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.376] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.376] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.376] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.376] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.376] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.376] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.377] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0190.377] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0190.377] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0190.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0190.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0190.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv.EnyBenied", lpFilePart=0x0) returned 0x40 [0190.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0190.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0wrzkdmnsust.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.426] GetFileType (hFile=0x238) returned 0x1 [0190.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0190.426] GetFileType (hFile=0x238) returned 0x1 [0190.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv", lpFilePart=0x0) returned 0x36 [0190.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0190.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0wrzkdmnsust.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0190.959] GetFileType (hFile=0x228) returned 0x1 [0190.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0190.960] GetFileType (hFile=0x228) returned 0x1 [0190.960] ReadFile (in: hFile=0x228, lpBuffer=0x2711f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2711f38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0190.967] ReadFile (in: hFile=0x228, lpBuffer=0x2711f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2711f38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0190.967] ReadFile (in: hFile=0x228, lpBuffer=0x2711f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2711f38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0190.967] ReadFile (in: hFile=0x228, lpBuffer=0x2711f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2711f38*, lpNumberOfBytesRead=0x1add88*=0xbbb, lpOverlapped=0x0) returned 1 [0190.968] ReadFile (in: hFile=0x228, lpBuffer=0x2711edb, nNumberOfBytesToRead=0x45, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2711edb*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0190.968] ReadFile (in: hFile=0x228, lpBuffer=0x2711f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2711f38*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0190.968] CloseHandle (hObject=0x228) returned 1 [0190.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv", lpFilePart=0x0) returned 0x36 [0190.969] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0wrZkDmnsUSt.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0wrzkdmnsust.flv")) returned 1 [0190.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a.EnyBenied", lpFilePart=0x0) returned 0x38 [0190.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0190.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7zr4.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0190.973] GetFileType (hFile=0x238) returned 0x1 [0190.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0190.973] GetFileType (hFile=0x238) returned 0x1 [0191.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a", lpFilePart=0x0) returned 0x2e [0191.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0191.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7zr4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0191.479] GetFileType (hFile=0x228) returned 0x1 [0191.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0191.479] GetFileType (hFile=0x228) returned 0x1 [0191.479] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.486] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.486] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.486] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.487] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.487] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.487] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.488] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.488] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.488] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0191.489] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x88e, lpOverlapped=0x0) returned 1 [0191.489] ReadFile (in: hFile=0x228, lpBuffer=0x265cafe, nNumberOfBytesToRead=0x372, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265cafe*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0191.489] ReadFile (in: hFile=0x228, lpBuffer=0x265ce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ce88*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0191.489] CloseHandle (hObject=0x228) returned 1 [0191.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a", lpFilePart=0x0) returned 0x2e [0191.494] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7Zr4.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7zr4.m4a")) returned 1 [0191.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a.EnyBenied", lpFilePart=0x0) returned 0x3d [0191.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0191.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\apdk29nvm.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0191.497] GetFileType (hFile=0x238) returned 0x1 [0191.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0191.497] GetFileType (hFile=0x238) returned 0x1 [0192.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a", lpFilePart=0x0) returned 0x33 [0192.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0192.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\apdk29nvm.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0192.036] GetFileType (hFile=0x228) returned 0x1 [0192.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0192.036] GetFileType (hFile=0x228) returned 0x1 [0192.036] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.041] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.042] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.042] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.042] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.042] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.043] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.043] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.043] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.043] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.044] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.044] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.044] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.044] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.045] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.045] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.045] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.045] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.045] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x5f2, lpOverlapped=0x0) returned 1 [0192.046] ReadFile (in: hFile=0x228, lpBuffer=0x27aeaa2, nNumberOfBytesToRead=0x20e, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aeaa2*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0192.046] ReadFile (in: hFile=0x228, lpBuffer=0x27aecc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aecc8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0192.046] CloseHandle (hObject=0x228) returned 1 [0192.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a", lpFilePart=0x0) returned 0x33 [0192.046] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ApdK29nVm.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\apdk29nvm.m4a")) returned 1 [0192.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf.EnyBenied", lpFilePart=0x0) returned 0x42 [0192.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0192.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\byjpjsmkqn7syy.rtf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0192.050] GetFileType (hFile=0x238) returned 0x1 [0192.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0192.050] GetFileType (hFile=0x238) returned 0x1 [0192.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf", lpFilePart=0x0) returned 0x38 [0192.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0192.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\byjpjsmkqn7syy.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0192.593] GetFileType (hFile=0x228) returned 0x1 [0192.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0192.593] GetFileType (hFile=0x228) returned 0x1 [0192.594] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.600] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.601] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.601] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.601] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.602] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.602] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.602] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.603] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.603] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.603] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.603] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.604] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.604] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.604] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.605] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.605] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.605] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0192.606] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x3a4, lpOverlapped=0x0) returned 1 [0192.606] ReadFile (in: hFile=0x228, lpBuffer=0x2708c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708c10*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0192.606] CloseHandle (hObject=0x228) returned 1 [0192.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf", lpFilePart=0x0) returned 0x38 [0192.606] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\byJPjSMkqn7SYy.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\byjpjsmkqn7syy.rtf")) returned 1 [0192.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi.EnyBenied", lpFilePart=0x0) returned 0x3f [0192.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0192.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\falu8afjgff.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0192.611] GetFileType (hFile=0x238) returned 0x1 [0192.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0192.611] GetFileType (hFile=0x238) returned 0x1 [0193.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi", lpFilePart=0x0) returned 0x35 [0193.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0193.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\falu8afjgff.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0193.190] GetFileType (hFile=0x228) returned 0x1 [0193.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0193.190] GetFileType (hFile=0x228) returned 0x1 [0193.190] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.197] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.197] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.198] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.198] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.198] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.199] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.199] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.199] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.199] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.200] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.200] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.200] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.201] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.201] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.201] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.201] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.202] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.202] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.202] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.203] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.203] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.203] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.203] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0xca6, lpOverlapped=0x0) returned 1 [0193.204] ReadFile (in: hFile=0x228, lpBuffer=0x26625d6, nNumberOfBytesToRead=0x35a, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26625d6*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0193.204] ReadFile (in: hFile=0x228, lpBuffer=0x2662948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2662948*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0193.204] CloseHandle (hObject=0x228) returned 1 [0193.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi", lpFilePart=0x0) returned 0x35 [0193.204] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Falu8AFJGFf.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\falu8afjgff.avi")) returned 1 [0193.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt.EnyBenied", lpFilePart=0x0) returned 0x3f [0193.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0193.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\frid5 tbbih.ppt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0193.210] GetFileType (hFile=0x238) returned 0x1 [0193.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0193.210] GetFileType (hFile=0x238) returned 0x1 [0193.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt", lpFilePart=0x0) returned 0x35 [0193.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0193.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\frid5 tbbih.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0193.753] GetFileType (hFile=0x228) returned 0x1 [0193.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0193.753] GetFileType (hFile=0x228) returned 0x1 [0193.753] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.759] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.777] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.777] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.777] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.777] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.778] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.778] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.778] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.779] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.779] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.779] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.779] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.780] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.780] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.780] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.781] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.781] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.781] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0193.782] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x99f, lpOverlapped=0x0) returned 1 [0193.782] ReadFile (in: hFile=0x228, lpBuffer=0x27c1e0f, nNumberOfBytesToRead=0x261, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c1e0f*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0193.782] ReadFile (in: hFile=0x228, lpBuffer=0x27c2088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c2088*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0193.782] CloseHandle (hObject=0x228) returned 1 [0193.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt", lpFilePart=0x0) returned 0x35 [0193.783] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Frid5 TBbih.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\frid5 tbbih.ppt")) returned 1 [0193.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv.EnyBenied", lpFilePart=0x0) returned 0x3c [0193.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0193.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gasbt7zk.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0193.788] GetFileType (hFile=0x238) returned 0x1 [0193.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0193.788] GetFileType (hFile=0x238) returned 0x1 [0194.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv", lpFilePart=0x0) returned 0x32 [0194.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0194.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gasbt7zk.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0194.356] GetFileType (hFile=0x228) returned 0x1 [0194.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0194.356] GetFileType (hFile=0x228) returned 0x1 [0194.356] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.364] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.364] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.365] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.365] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.365] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.365] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.366] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.366] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.366] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.367] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.367] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.367] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.367] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.368] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.368] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.368] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.369] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.369] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.369] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0194.369] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x2d7, lpOverlapped=0x0) returned 1 [0194.370] ReadFile (in: hFile=0x228, lpBuffer=0x271d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x271d378*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0194.370] CloseHandle (hObject=0x228) returned 1 [0194.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv", lpFilePart=0x0) returned 0x32 [0194.370] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GasbT7zK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gasbt7zk.flv")) returned 1 [0194.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp.EnyBenied", lpFilePart=0x0) returned 0x3e [0194.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0194.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jacqd33vjs.odp.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0194.375] GetFileType (hFile=0x238) returned 0x1 [0194.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0194.375] GetFileType (hFile=0x238) returned 0x1 [0194.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp", lpFilePart=0x0) returned 0x34 [0194.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0194.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jacqd33vjs.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0194.993] GetFileType (hFile=0x228) returned 0x1 [0194.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0194.993] GetFileType (hFile=0x228) returned 0x1 [0194.993] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.000] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.000] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.000] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.001] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.001] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.001] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.002] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.002] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.002] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.003] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.003] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.003] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.003] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.004] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.004] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.004] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.005] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.005] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.005] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.005] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.006] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.006] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0xd1d, lpOverlapped=0x0) returned 1 [0195.006] ReadFile (in: hFile=0x228, lpBuffer=0x2678d5d, nNumberOfBytesToRead=0x2e3, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2678d5d*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0195.006] ReadFile (in: hFile=0x228, lpBuffer=0x2679058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2679058*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0195.006] CloseHandle (hObject=0x228) returned 1 [0195.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp", lpFilePart=0x0) returned 0x34 [0195.007] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JAcQd33vJS.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jacqd33vjs.odp")) returned 1 [0195.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a.EnyBenied", lpFilePart=0x0) returned 0x42 [0195.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0195.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jbjhglffzkb3ym.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0195.011] GetFileType (hFile=0x238) returned 0x1 [0195.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0195.011] GetFileType (hFile=0x238) returned 0x1 [0195.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a", lpFilePart=0x0) returned 0x38 [0195.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0195.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jbjhglffzkb3ym.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0195.452] GetFileType (hFile=0x228) returned 0x1 [0195.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0195.452] GetFileType (hFile=0x228) returned 0x1 [0195.452] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.457] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.457] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.457] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.458] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.458] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.458] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.458] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.458] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.459] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.459] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.459] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.459] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.459] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.460] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.460] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.460] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.460] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.460] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.461] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.461] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0xfc8, lpOverlapped=0x0) returned 1 [0195.461] ReadFile (in: hFile=0x228, lpBuffer=0x27d7770, nNumberOfBytesToRead=0x38, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d7770*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0195.461] ReadFile (in: hFile=0x228, lpBuffer=0x27d77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d77c0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0195.461] CloseHandle (hObject=0x228) returned 1 [0195.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a", lpFilePart=0x0) returned 0x38 [0195.462] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jBjHgLFFZkb3YM.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jbjhglffzkb3ym.m4a")) returned 1 [0195.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg.EnyBenied", lpFilePart=0x0) returned 0x38 [0195.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0195.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mjdd.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0195.466] GetFileType (hFile=0x238) returned 0x1 [0195.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0195.466] GetFileType (hFile=0x238) returned 0x1 [0195.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg", lpFilePart=0x0) returned 0x2e [0195.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0195.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mjdd.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0195.885] GetFileType (hFile=0x228) returned 0x1 [0195.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0195.885] GetFileType (hFile=0x228) returned 0x1 [0195.885] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.890] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.891] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.891] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.891] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.891] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.892] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.892] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.892] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.892] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.893] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.893] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.893] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.894] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.895] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.895] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.895] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.895] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.895] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.896] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.896] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.896] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.896] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0195.896] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0xd16, lpOverlapped=0x0) returned 1 [0195.897] ReadFile (in: hFile=0x228, lpBuffer=0x2733ea6, nNumberOfBytesToRead=0x2ea, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2733ea6*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0195.897] ReadFile (in: hFile=0x228, lpBuffer=0x27341a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27341a8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0195.897] CloseHandle (hObject=0x228) returned 1 [0195.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg", lpFilePart=0x0) returned 0x2e [0195.897] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mJDd.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mjdd.jpg")) returned 1 [0195.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4.EnyBenied", lpFilePart=0x0) returned 0x3e [0195.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0195.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mmof-5dpor.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0195.902] GetFileType (hFile=0x238) returned 0x1 [0195.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0195.903] GetFileType (hFile=0x238) returned 0x1 [0196.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4", lpFilePart=0x0) returned 0x34 [0196.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0196.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mmof-5dpor.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0196.635] GetFileType (hFile=0x228) returned 0x1 [0196.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0196.635] GetFileType (hFile=0x228) returned 0x1 [0196.635] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.641] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.642] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.642] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.642] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.642] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.643] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.643] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.643] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.644] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.644] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0196.644] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x677, lpOverlapped=0x0) returned 1 [0196.644] ReadFile (in: hFile=0x228, lpBuffer=0x2693857, nNumberOfBytesToRead=0x189, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2693857*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0196.644] ReadFile (in: hFile=0x228, lpBuffer=0x26939f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26939f8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0196.644] CloseHandle (hObject=0x228) returned 1 [0196.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4", lpFilePart=0x0) returned 0x34 [0196.649] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mmoF-5dpor.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mmof-5dpor.mp4")) returned 1 [0196.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a.EnyBenied", lpFilePart=0x0) returned 0x45 [0196.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0196.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nzlocrltyjtazaz-i.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0196.653] GetFileType (hFile=0x238) returned 0x1 [0196.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0196.653] GetFileType (hFile=0x238) returned 0x1 [0197.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a", lpFilePart=0x0) returned 0x3b [0197.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0197.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nzlocrltyjtazaz-i.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0197.247] GetFileType (hFile=0x228) returned 0x1 [0197.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0197.247] GetFileType (hFile=0x228) returned 0x1 [0197.247] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.254] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.254] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.254] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.255] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.255] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.255] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.256] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.256] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.256] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.256] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.257] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.257] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.257] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.258] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.258] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.258] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.259] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0197.259] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0xcb2, lpOverlapped=0x0) returned 1 [0197.259] ReadFile (in: hFile=0x228, lpBuffer=0x27e632a, nNumberOfBytesToRead=0x34e, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e632a*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0197.259] ReadFile (in: hFile=0x228, lpBuffer=0x27e6690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e6690*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0197.259] CloseHandle (hObject=0x228) returned 1 [0197.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a", lpFilePart=0x0) returned 0x3b [0197.261] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nzLoCrLtYJTazaz-i.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nzlocrltyjtazaz-i.m4a")) returned 1 [0197.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx.EnyBenied", lpFilePart=0x0) returned 0x49 [0197.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0197.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r1ow6hamqgjnud1aasm2.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0197.265] GetFileType (hFile=0x238) returned 0x1 [0197.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0197.265] GetFileType (hFile=0x238) returned 0x1 [0198.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx", lpFilePart=0x0) returned 0x3f [0198.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0198.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r1ow6hamqgjnud1aasm2.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0198.020] GetFileType (hFile=0x228) returned 0x1 [0198.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0198.020] GetFileType (hFile=0x228) returned 0x1 [0198.020] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.027] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.027] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.027] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.028] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.028] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.028] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.028] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.029] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.029] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.029] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.030] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.030] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.030] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.030] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.031] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0198.031] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x1c6, lpOverlapped=0x0) returned 1 [0198.031] ReadFile (in: hFile=0x228, lpBuffer=0x2740d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2740d30*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0198.031] CloseHandle (hObject=0x228) returned 1 [0198.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx", lpFilePart=0x0) returned 0x3f [0198.032] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R1OW6hAmQgjnud1AasM2.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r1ow6hamqgjnud1aasm2.xlsx")) returned 1 [0198.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a.EnyBenied", lpFilePart=0x0) returned 0x39 [0198.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0198.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r79zt.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0198.037] GetFileType (hFile=0x238) returned 0x1 [0198.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0198.037] GetFileType (hFile=0x238) returned 0x1 [0199.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a", lpFilePart=0x0) returned 0x2f [0199.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0199.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r79zt.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0199.022] GetFileType (hFile=0x228) returned 0x1 [0199.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0199.022] GetFileType (hFile=0x228) returned 0x1 [0199.022] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.071] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.072] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.072] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.072] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.072] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.073] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.073] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.073] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.074] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.074] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.074] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.074] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.075] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.075] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.075] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.075] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.076] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.076] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.076] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x1f2, lpOverlapped=0x0) returned 1 [0199.076] ReadFile (in: hFile=0x228, lpBuffer=0x2698730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2698730*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0199.076] CloseHandle (hObject=0x228) returned 1 [0199.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a", lpFilePart=0x0) returned 0x2f [0199.077] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\r79zt.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r79zt.m4a")) returned 1 [0199.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4.EnyBenied", lpFilePart=0x0) returned 0x3a [0199.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0199.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u1gsrq.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0199.082] GetFileType (hFile=0x238) returned 0x1 [0199.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0199.082] GetFileType (hFile=0x238) returned 0x1 [0199.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4", lpFilePart=0x0) returned 0x30 [0199.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0199.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u1gsrq.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0199.770] GetFileType (hFile=0x228) returned 0x1 [0199.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0199.770] GetFileType (hFile=0x228) returned 0x1 [0199.770] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.784] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.784] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.785] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.785] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.785] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.786] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.786] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.786] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.786] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.787] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.787] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.787] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.788] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0199.788] ReadFile (in: hFile=0x228, lpBuffer=0x27da5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27da5a0*, lpNumberOfBytesRead=0x1add88*=0xf4d, lpOverlapped=0x0) returned 1 [0199.792] ReadFile (in: hFile=0x228, lpBuffer=0x25eb64d, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25eb64d*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0199.792] ReadFile (in: hFile=0x228, lpBuffer=0x25eb718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25eb718*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0199.792] CloseHandle (hObject=0x228) returned 1 [0199.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4", lpFilePart=0x0) returned 0x30 [0199.793] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\U1Gsrq.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u1gsrq.mp4")) returned 1 [0199.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a.EnyBenied", lpFilePart=0x0) returned 0x39 [0199.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0199.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zk9mw.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0199.797] GetFileType (hFile=0x238) returned 0x1 [0199.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0199.797] GetFileType (hFile=0x238) returned 0x1 [0200.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a", lpFilePart=0x0) returned 0x2f [0200.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0200.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zk9mw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0200.299] GetFileType (hFile=0x228) returned 0x1 [0200.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0200.299] GetFileType (hFile=0x228) returned 0x1 [0200.299] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.304] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.305] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.305] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.305] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.305] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.306] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.306] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.306] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.306] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.307] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.307] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.307] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.308] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.308] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.308] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.308] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.309] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.309] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0xd92, lpOverlapped=0x0) returned 1 [0200.309] ReadFile (in: hFile=0x228, lpBuffer=0x27320b2, nNumberOfBytesToRead=0x26e, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27320b2*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0200.309] ReadFile (in: hFile=0x228, lpBuffer=0x2732338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2732338*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0200.309] CloseHandle (hObject=0x228) returned 1 [0200.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a", lpFilePart=0x0) returned 0x2f [0200.311] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZK9MW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zk9mw.m4a")) returned 1 [0200.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4.EnyBenied", lpFilePart=0x0) returned 0x48 [0200.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0200.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zntxkctczdcuzmfx6 39.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0200.315] GetFileType (hFile=0x238) returned 0x1 [0200.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0200.316] GetFileType (hFile=0x238) returned 0x1 [0200.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4", lpFilePart=0x0) returned 0x3e [0200.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0200.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zntxkctczdcuzmfx6 39.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0200.732] GetFileType (hFile=0x228) returned 0x1 [0200.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0200.732] GetFileType (hFile=0x228) returned 0x1 [0200.732] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.739] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.739] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.739] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.739] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.740] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.740] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.740] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.740] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.741] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.741] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.741] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.741] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.741] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0200.742] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x895, lpOverlapped=0x0) returned 1 [0200.742] ReadFile (in: hFile=0x228, lpBuffer=0x268c705, nNumberOfBytesToRead=0x36b, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268c705*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0200.742] ReadFile (in: hFile=0x228, lpBuffer=0x268ca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268ca88*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0200.742] CloseHandle (hObject=0x228) returned 1 [0200.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4", lpFilePart=0x0) returned 0x3e [0200.742] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\znTXkcTcZDcuZMFx6 39.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zntxkctczdcuzmfx6 39.mp4")) returned 1 [0200.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx.EnyBenied", lpFilePart=0x0) returned 0x3e [0200.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0200.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrc485csv.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0200.747] GetFileType (hFile=0x238) returned 0x1 [0200.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0200.747] GetFileType (hFile=0x238) returned 0x1 [0201.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx", lpFilePart=0x0) returned 0x34 [0201.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0201.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrc485csv.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0201.185] GetFileType (hFile=0x228) returned 0x1 [0201.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0201.185] GetFileType (hFile=0x228) returned 0x1 [0201.185] ReadFile (in: hFile=0x228, lpBuffer=0x27e2a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e2a60*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0201.190] ReadFile (in: hFile=0x228, lpBuffer=0x27e2a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e2a60*, lpNumberOfBytesRead=0x1add88*=0x6af, lpOverlapped=0x0) returned 1 [0201.190] ReadFile (in: hFile=0x228, lpBuffer=0x27e28f7, nNumberOfBytesToRead=0x151, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e28f7*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0201.191] ReadFile (in: hFile=0x228, lpBuffer=0x27e2a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e2a60*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0201.225] CloseHandle (hObject=0x228) returned 1 [0201.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx", lpFilePart=0x0) returned 0x34 [0201.225] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zrC485Csv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrc485csv.docx")) returned 1 [0201.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0201.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_", lpFilePart=0x0) returned 0x2e [0201.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\", lpFilePart=0x0) returned 0x2f [0201.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0201.227] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.227] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.227] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.227] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.227] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.228] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0201.228] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0201.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0201.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0201.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0201.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_", lpFilePart=0x0) returned 0x2e [0201.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\", lpFilePart=0x0) returned 0x2f [0201.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0201.229] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.229] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.229] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.229] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.229] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.230] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.230] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.230] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.230] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.230] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.230] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.230] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.231] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0201.231] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0201.231] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0201.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0201.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0201.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx.EnyBenied", lpFilePart=0x0) returned 0x4a [0201.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0201.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\7p58pphtwbul.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0201.233] GetFileType (hFile=0x238) returned 0x1 [0201.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0201.233] GetFileType (hFile=0x238) returned 0x1 [0202.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx", lpFilePart=0x0) returned 0x40 [0202.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0202.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\7p58pphtwbul.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0202.200] GetFileType (hFile=0x228) returned 0x1 [0202.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0202.200] GetFileType (hFile=0x228) returned 0x1 [0202.201] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.207] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.209] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.209] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.209] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.209] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.210] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.210] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.210] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.211] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.211] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.211] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.211] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.212] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.212] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.212] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0202.213] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x8ec, lpOverlapped=0x0) returned 1 [0202.213] ReadFile (in: hFile=0x228, lpBuffer=0x2730ae4, nNumberOfBytesToRead=0x314, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730ae4*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0202.213] ReadFile (in: hFile=0x228, lpBuffer=0x2730e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2730e10*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0202.213] CloseHandle (hObject=0x228) returned 1 [0202.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx", lpFilePart=0x0) returned 0x40 [0202.213] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7P58PphtWBuL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\7p58pphtwbul.docx")) returned 1 [0202.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a.EnyBenied", lpFilePart=0x0) returned 0x4c [0202.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0202.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\7xtb dljnxr37ba.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0202.223] GetFileType (hFile=0x238) returned 0x1 [0202.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0202.223] GetFileType (hFile=0x238) returned 0x1 [0203.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a", lpFilePart=0x0) returned 0x42 [0203.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0203.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\7xtb dljnxr37ba.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0203.493] GetFileType (hFile=0x228) returned 0x1 [0203.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0203.493] GetFileType (hFile=0x228) returned 0x1 [0203.494] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.499] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.499] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.499] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.500] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.500] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.500] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.500] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.501] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.501] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.501] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.501] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.502] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.502] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.503] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0203.503] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0xfff, lpOverlapped=0x0) returned 1 [0203.503] ReadFile (in: hFile=0x228, lpBuffer=0x2688fdf, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688fdf*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0203.503] ReadFile (in: hFile=0x228, lpBuffer=0x2688ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2688ff8*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0203.503] CloseHandle (hObject=0x228) returned 1 [0203.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a", lpFilePart=0x0) returned 0x42 [0203.504] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\7XTb dLJNXR37ba.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\7xtb dljnxr37ba.m4a")) returned 1 [0203.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg.EnyBenied", lpFilePart=0x0) returned 0x46 [0203.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0203.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\acowqz hg.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0203.507] GetFileType (hFile=0x238) returned 0x1 [0203.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0203.507] GetFileType (hFile=0x238) returned 0x1 [0204.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg", lpFilePart=0x0) returned 0x3c [0204.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0204.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\acowqz hg.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0204.486] GetFileType (hFile=0x228) returned 0x1 [0204.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0204.486] GetFileType (hFile=0x228) returned 0x1 [0204.486] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.494] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.496] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.496] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.496] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.497] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.497] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.497] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.497] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0204.498] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x6dc, lpOverlapped=0x0) returned 1 [0204.498] ReadFile (in: hFile=0x228, lpBuffer=0x27e067c, nNumberOfBytesToRead=0x124, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e067c*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0204.498] ReadFile (in: hFile=0x228, lpBuffer=0x27e07b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27e07b8*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0204.498] CloseHandle (hObject=0x228) returned 1 [0204.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg", lpFilePart=0x0) returned 0x3c [0204.499] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\aCowqz hG.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\acowqz hg.jpg")) returned 1 [0204.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi.EnyBenied", lpFilePart=0x0) returned 0x46 [0204.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0204.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\cwc6ckh1h.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0204.505] GetFileType (hFile=0x238) returned 0x1 [0204.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0204.506] GetFileType (hFile=0x238) returned 0x1 [0205.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi", lpFilePart=0x0) returned 0x3c [0205.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0205.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\cwc6ckh1h.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0205.434] GetFileType (hFile=0x228) returned 0x1 [0205.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0205.434] GetFileType (hFile=0x228) returned 0x1 [0205.434] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.441] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.441] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.441] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.443] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.443] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.443] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.444] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.444] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.444] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.446] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.446] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0205.446] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x7e2, lpOverlapped=0x0) returned 1 [0205.446] ReadFile (in: hFile=0x228, lpBuffer=0x27345aa, nNumberOfBytesToRead=0x1e, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345aa*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0205.447] ReadFile (in: hFile=0x228, lpBuffer=0x27345e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27345e0*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0205.447] CloseHandle (hObject=0x228) returned 1 [0205.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi", lpFilePart=0x0) returned 0x3c [0205.447] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\cwc6ckh1H.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\cwc6ckh1h.avi")) returned 1 [0205.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png.EnyBenied", lpFilePart=0x0) returned 0x42 [0205.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0205.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\st5zg.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0205.452] GetFileType (hFile=0x238) returned 0x1 [0205.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0205.452] GetFileType (hFile=0x238) returned 0x1 [0206.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png", lpFilePart=0x0) returned 0x38 [0206.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0206.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\st5zg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0206.414] GetFileType (hFile=0x228) returned 0x1 [0206.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0206.414] GetFileType (hFile=0x228) returned 0x1 [0206.414] ReadFile (in: hFile=0x228, lpBuffer=0x2690850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2690850*, lpNumberOfBytesRead=0x1add08*=0xdec, lpOverlapped=0x0) returned 1 [0206.419] ReadFile (in: hFile=0x228, lpBuffer=0x2690624, nNumberOfBytesToRead=0x214, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2690624*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0206.420] ReadFile (in: hFile=0x228, lpBuffer=0x2690850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2690850*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0206.420] CloseHandle (hObject=0x228) returned 1 [0206.420] WriteFile (in: hFile=0x238, lpBuffer=0x268ee00*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x268ee00*, lpNumberOfBytesWritten=0x1adbd8*=0xe10, lpOverlapped=0x0) returned 1 [0206.421] CloseHandle (hObject=0x238) returned 1 [0206.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png", lpFilePart=0x0) returned 0x38 [0206.421] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\sT5zG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\st5zg.png")) returned 1 [0206.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a.EnyBenied", lpFilePart=0x0) returned 0x45 [0206.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0206.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\vcobijse.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0206.425] GetFileType (hFile=0x238) returned 0x1 [0206.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0206.426] GetFileType (hFile=0x238) returned 0x1 [0207.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a", lpFilePart=0x0) returned 0x3b [0207.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0207.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\vcobijse.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0207.448] GetFileType (hFile=0x228) returned 0x1 [0207.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0207.448] GetFileType (hFile=0x228) returned 0x1 [0207.448] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.517] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.518] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.518] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.518] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.518] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.519] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.519] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.519] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.520] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.520] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.520] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.520] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.521] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.521] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.521] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.521] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.522] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0207.522] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0xb7e, lpOverlapped=0x0) returned 1 [0207.522] ReadFile (in: hFile=0x228, lpBuffer=0x27d87be, nNumberOfBytesToRead=0x82, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d87be*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0207.522] ReadFile (in: hFile=0x228, lpBuffer=0x27d8858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27d8858*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0207.522] CloseHandle (hObject=0x228) returned 1 [0207.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a", lpFilePart=0x0) returned 0x3b [0207.523] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\VCOBiJSe.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\vcobijse.m4a")) returned 1 [0207.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3a [0207.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0207.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0207.528] GetFileType (hFile=0x238) returned 0x1 [0207.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0207.528] GetFileType (hFile=0x238) returned 0x1 [0207.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\ENYBENY.png", lpFilePart=0x0) returned 0x3a [0207.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0207.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0207.531] GetFileType (hFile=0x238) returned 0x1 [0207.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0207.531] GetFileType (hFile=0x238) returned 0x1 [0207.531] WriteFile (in: hFile=0x238, lpBuffer=0x27f7098*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x27f7098*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0207.532] CloseHandle (hObject=0x238) returned 1 [0207.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x65 [0207.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0207.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8M2uJUn_\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8m2ujun_\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0207.534] GetFileType (hFile=0x238) returned 0x1 [0207.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0207.534] GetFileType (hFile=0x238) returned 0x1 [0207.537] WriteFile (in: hFile=0x238, lpBuffer=0x25fea88*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x25fea88*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0207.538] CloseHandle (hObject=0x238) returned 1 [0207.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0207.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0207.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0207.542] GetFileType (hFile=0x238) returned 0x1 [0207.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0207.542] GetFileType (hFile=0x238) returned 0x1 [0207.542] WriteFile (in: hFile=0x238, lpBuffer=0x2608e60*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2608e60*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0207.543] CloseHandle (hObject=0x238) returned 1 [0207.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0207.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0207.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0207.545] GetFileType (hFile=0x238) returned 0x1 [0207.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0207.545] GetFileType (hFile=0x238) returned 0x1 [0207.545] WriteFile (in: hFile=0x238, lpBuffer=0x2609ef8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2609ef8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0207.547] CloseHandle (hObject=0x238) returned 1 [0207.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0207.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0207.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0207.669] GetFileType (hFile=0x238) returned 0x1 [0207.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0207.669] GetFileType (hFile=0x238) returned 0x1 [0207.669] WriteFile (in: hFile=0x238, lpBuffer=0x2610ae0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2610ae0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0207.670] CloseHandle (hObject=0x238) returned 1 [0207.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0207.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0207.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0207.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0207.671] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.671] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.672] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.672] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.672] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.672] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.672] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.672] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.672] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.672] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.673] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.673] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.673] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.673] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.673] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.673] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.673] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.674] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.675] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0207.675] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0207.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0207.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0207.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0207.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0207.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0207.676] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2e0780 [0207.676] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.676] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.677] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.678] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.679] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.679] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.679] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.679] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.679] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.679] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.679] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.680] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0207.681] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0207.681] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0207.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0207.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0207.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx.EnyBenied", lpFilePart=0x0) returned 0x48 [0207.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0207.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1y1n2ffuoufbthzhj.pptx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0207.683] GetFileType (hFile=0x238) returned 0x1 [0207.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0207.683] GetFileType (hFile=0x238) returned 0x1 [0208.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx", lpFilePart=0x0) returned 0x3e [0208.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0208.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1y1n2ffuoufbthzhj.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0208.712] GetFileType (hFile=0x228) returned 0x1 [0208.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0208.712] GetFileType (hFile=0x228) returned 0x1 [0208.712] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.719] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.719] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.720] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.720] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.720] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.720] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.721] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.721] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.721] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.722] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.722] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.760] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.760] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.760] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.760] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.761] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.761] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.761] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.762] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.762] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.762] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.762] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0208.763] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x347, lpOverlapped=0x0) returned 1 [0208.763] ReadFile (in: hFile=0x228, lpBuffer=0x2761b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2761b40*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0208.763] CloseHandle (hObject=0x228) returned 1 [0208.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx", lpFilePart=0x0) returned 0x3e [0208.763] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1y1N2FFuOUFBthzHJ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1y1n2ffuoufbthzhj.pptx")) returned 1 [0208.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx.EnyBenied", lpFilePart=0x0) returned 0x3e [0208.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0208.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3scecjw.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0208.767] GetFileType (hFile=0x238) returned 0x1 [0208.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0208.768] GetFileType (hFile=0x238) returned 0x1 [0209.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx", lpFilePart=0x0) returned 0x34 [0209.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0209.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3scecjw.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0209.927] GetFileType (hFile=0x228) returned 0x1 [0209.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0209.928] GetFileType (hFile=0x228) returned 0x1 [0209.928] ReadFile (in: hFile=0x228, lpBuffer=0x26aabd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26aabd8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0209.935] ReadFile (in: hFile=0x228, lpBuffer=0x26aabd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26aabd8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0209.935] ReadFile (in: hFile=0x228, lpBuffer=0x26aabd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26aabd8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0209.935] ReadFile (in: hFile=0x228, lpBuffer=0x26aabd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26aabd8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0209.935] ReadFile (in: hFile=0x228, lpBuffer=0x26aabd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26aabd8*, lpNumberOfBytesRead=0x1add88*=0x7ce, lpOverlapped=0x0) returned 1 [0209.936] ReadFile (in: hFile=0x228, lpBuffer=0x26aab8e, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26aab8e*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0209.936] ReadFile (in: hFile=0x228, lpBuffer=0x26aabd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26aabd8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0209.936] CloseHandle (hObject=0x228) returned 1 [0209.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx", lpFilePart=0x0) returned 0x34 [0209.936] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3ScEcJW.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3scecjw.docx")) returned 1 [0209.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf.EnyBenied", lpFilePart=0x0) returned 0x40 [0209.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0209.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8h2zu93i3i.pdf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0209.940] GetFileType (hFile=0x238) returned 0x1 [0209.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0209.940] GetFileType (hFile=0x238) returned 0x1 [0210.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf", lpFilePart=0x0) returned 0x36 [0210.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0210.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8h2zu93i3i.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0210.879] GetFileType (hFile=0x228) returned 0x1 [0210.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0210.879] GetFileType (hFile=0x228) returned 0x1 [0210.879] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0210.885] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0210.886] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0210.886] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0210.886] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0210.886] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0210.887] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0210.887] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0xec4, lpOverlapped=0x0) returned 1 [0210.887] ReadFile (in: hFile=0x228, lpBuffer=0x25f6634, nNumberOfBytesToRead=0x13c, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6634*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0210.887] ReadFile (in: hFile=0x228, lpBuffer=0x25f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f6788*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0210.887] CloseHandle (hObject=0x228) returned 1 [0210.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf", lpFilePart=0x0) returned 0x36 [0210.888] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8H2ZU93i3i.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8h2zu93i3i.pdf")) returned 1 [0210.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx.EnyBenied", lpFilePart=0x0) returned 0x41 [0210.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0210.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8jy5fc mcq.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0210.891] GetFileType (hFile=0x238) returned 0x1 [0210.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0210.891] GetFileType (hFile=0x238) returned 0x1 [0211.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx", lpFilePart=0x0) returned 0x37 [0211.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0211.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8jy5fc mcq.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0211.454] GetFileType (hFile=0x228) returned 0x1 [0211.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0211.454] GetFileType (hFile=0x228) returned 0x1 [0211.454] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.462] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.463] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.463] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.463] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.463] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.464] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.464] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.464] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.464] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.465] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.465] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.465] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.465] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.466] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.466] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0211.467] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0xd6d, lpOverlapped=0x0) returned 1 [0211.467] ReadFile (in: hFile=0x228, lpBuffer=0x2745845, nNumberOfBytesToRead=0x293, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745845*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0211.467] ReadFile (in: hFile=0x228, lpBuffer=0x2745af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2745af0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0211.467] CloseHandle (hObject=0x228) returned 1 [0211.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx", lpFilePart=0x0) returned 0x37 [0211.468] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8jY5fC MCQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8jy5fc mcq.xlsx")) returned 1 [0211.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx.EnyBenied", lpFilePart=0x0) returned 0x3b [0211.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0211.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\97mp.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0211.471] GetFileType (hFile=0x238) returned 0x1 [0211.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0211.471] GetFileType (hFile=0x238) returned 0x1 [0212.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx", lpFilePart=0x0) returned 0x31 [0212.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0212.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\97mp.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0212.305] GetFileType (hFile=0x228) returned 0x1 [0212.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0212.305] GetFileType (hFile=0x228) returned 0x1 [0212.305] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.310] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.310] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.310] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.311] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.311] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.311] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.311] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.311] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.312] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.312] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.312] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0212.312] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x7fd, lpOverlapped=0x0) returned 1 [0212.312] ReadFile (in: hFile=0x228, lpBuffer=0x269e095, nNumberOfBytesToRead=0x3, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e095*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0212.313] ReadFile (in: hFile=0x228, lpBuffer=0x269e0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269e0b0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0212.313] CloseHandle (hObject=0x228) returned 1 [0212.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx", lpFilePart=0x0) returned 0x31 [0212.313] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\97MP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\97mp.xlsx")) returned 1 [0212.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx.EnyBenied", lpFilePart=0x0) returned 0x42 [0212.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0212.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bjpqq5v mhy.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0212.335] GetFileType (hFile=0x238) returned 0x1 [0212.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0212.335] GetFileType (hFile=0x238) returned 0x1 [0213.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx", lpFilePart=0x0) returned 0x38 [0213.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0213.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bjpqq5v mhy.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0213.228] GetFileType (hFile=0x228) returned 0x1 [0213.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0213.228] GetFileType (hFile=0x228) returned 0x1 [0213.229] ReadFile (in: hFile=0x228, lpBuffer=0x27f1f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27f1f18*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.234] ReadFile (in: hFile=0x228, lpBuffer=0x27f1f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27f1f18*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.236] ReadFile (in: hFile=0x228, lpBuffer=0x25f5620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f5620*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.244] ReadFile (in: hFile=0x228, lpBuffer=0x25f5620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f5620*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] ReadFile (in: hFile=0x228, lpBuffer=0x25f5620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f5620*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] ReadFile (in: hFile=0x228, lpBuffer=0x25f5620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f5620*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] ReadFile (in: hFile=0x228, lpBuffer=0x25f5620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f5620*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] ReadFile (in: hFile=0x228, lpBuffer=0x25f5620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f5620*, lpNumberOfBytesRead=0x1add88*=0xbcf, lpOverlapped=0x0) returned 1 [0213.245] ReadFile (in: hFile=0x228, lpBuffer=0x25f55d7, nNumberOfBytesToRead=0x31, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f55d7*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0213.246] ReadFile (in: hFile=0x228, lpBuffer=0x25f5620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f5620*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0213.246] CloseHandle (hObject=0x228) returned 1 [0213.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx", lpFilePart=0x0) returned 0x38 [0213.246] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BjpQQ5v Mhy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bjpqq5v mhy.docx")) returned 1 [0213.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx.EnyBenied", lpFilePart=0x0) returned 0x44 [0213.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0213.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcvcja1fn8ufg.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0213.249] GetFileType (hFile=0x238) returned 0x1 [0213.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0213.249] GetFileType (hFile=0x238) returned 0x1 [0213.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx", lpFilePart=0x0) returned 0x3a [0213.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0213.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcvcja1fn8ufg.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0213.690] GetFileType (hFile=0x228) returned 0x1 [0213.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0213.690] GetFileType (hFile=0x228) returned 0x1 [0213.690] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.698] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.698] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.699] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.699] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.699] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.700] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.700] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.700] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.701] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.701] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.701] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.701] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.702] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.702] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.702] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.703] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.703] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.703] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.703] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.704] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0213.715] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0xa01, lpOverlapped=0x0) returned 1 [0213.715] ReadFile (in: hFile=0x228, lpBuffer=0x2742329, nNumberOfBytesToRead=0x1ff, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742329*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0213.716] ReadFile (in: hFile=0x228, lpBuffer=0x2742540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2742540*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0213.716] CloseHandle (hObject=0x228) returned 1 [0213.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx", lpFilePart=0x0) returned 0x3a [0213.716] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DcVcJa1Fn8UfG.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcvcja1fn8ufg.xlsx")) returned 1 [0213.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx.EnyBenied", lpFilePart=0x0) returned 0x43 [0213.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0213.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f po7msizrf0.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0213.720] GetFileType (hFile=0x238) returned 0x1 [0213.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0213.720] GetFileType (hFile=0x238) returned 0x1 [0214.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx", lpFilePart=0x0) returned 0x39 [0214.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0214.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f po7msizrf0.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0214.231] GetFileType (hFile=0x228) returned 0x1 [0214.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0214.231] GetFileType (hFile=0x228) returned 0x1 [0214.231] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.241] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.242] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.242] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.242] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.242] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.243] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.243] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.243] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.244] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x61e, lpOverlapped=0x0) returned 1 [0214.244] ReadFile (in: hFile=0x228, lpBuffer=0x269f7e6, nNumberOfBytesToRead=0x1e2, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f7e6*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0214.244] ReadFile (in: hFile=0x228, lpBuffer=0x269f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269f9e0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0214.244] CloseHandle (hObject=0x228) returned 1 [0214.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx", lpFilePart=0x0) returned 0x39 [0214.244] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F PO7MsIZRf0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f po7msizrf0.docx")) returned 1 [0214.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx.EnyBenied", lpFilePart=0x0) returned 0x40 [0214.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0214.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fw6u2x4ar.pptx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0214.248] GetFileType (hFile=0x238) returned 0x1 [0214.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0214.248] GetFileType (hFile=0x238) returned 0x1 [0214.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx", lpFilePart=0x0) returned 0x36 [0214.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0214.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fw6u2x4ar.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0214.659] GetFileType (hFile=0x228) returned 0x1 [0214.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0214.659] GetFileType (hFile=0x228) returned 0x1 [0214.659] ReadFile (in: hFile=0x228, lpBuffer=0x27f0548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27f0548*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0214.665] ReadFile (in: hFile=0x228, lpBuffer=0x27f0548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27f0548*, lpNumberOfBytesRead=0x1add88*=0xeae, lpOverlapped=0x0) returned 1 [0214.665] ReadFile (in: hFile=0x228, lpBuffer=0x27f03de, nNumberOfBytesToRead=0x152, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27f03de*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0214.665] ReadFile (in: hFile=0x228, lpBuffer=0x27f0548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27f0548*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0214.665] CloseHandle (hObject=0x228) returned 1 [0214.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx", lpFilePart=0x0) returned 0x36 [0214.666] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fW6U2x4aR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fw6u2x4ar.pptx")) returned 1 [0214.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx.EnyBenied", lpFilePart=0x0) returned 0x44 [0214.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0214.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g4kzxxxabigld.pptx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0214.669] GetFileType (hFile=0x238) returned 0x1 [0214.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0214.669] GetFileType (hFile=0x238) returned 0x1 [0215.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx", lpFilePart=0x0) returned 0x3a [0215.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0215.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g4kzxxxabigld.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0215.113] GetFileType (hFile=0x228) returned 0x1 [0215.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0215.114] GetFileType (hFile=0x228) returned 0x1 [0215.114] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.119] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.119] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.119] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.121] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.121] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.121] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.122] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.122] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.122] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.122] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x5d0, lpOverlapped=0x0) returned 1 [0215.123] ReadFile (in: hFile=0x228, lpBuffer=0x27394e8, nNumberOfBytesToRead=0x230, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27394e8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0215.123] ReadFile (in: hFile=0x228, lpBuffer=0x2739730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739730*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0215.123] CloseHandle (hObject=0x228) returned 1 [0215.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx", lpFilePart=0x0) returned 0x3a [0215.123] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g4kzXXXABiGLD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g4kzxxxabigld.pptx")) returned 1 [0215.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx.EnyBenied", lpFilePart=0x0) returned 0x43 [0215.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0215.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jtytquqv5fgw.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0215.126] GetFileType (hFile=0x238) returned 0x1 [0215.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0215.126] GetFileType (hFile=0x238) returned 0x1 [0215.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx", lpFilePart=0x0) returned 0x39 [0215.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0215.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jtytquqv5fgw.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0215.800] GetFileType (hFile=0x228) returned 0x1 [0215.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0215.800] GetFileType (hFile=0x228) returned 0x1 [0215.800] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.806] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.806] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.806] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.807] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.807] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.807] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.807] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.808] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0215.808] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x6dd, lpOverlapped=0x0) returned 1 [0215.808] ReadFile (in: hFile=0x228, lpBuffer=0x268f385, nNumberOfBytesToRead=0x123, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f385*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0215.808] ReadFile (in: hFile=0x228, lpBuffer=0x268f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268f4c0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0215.808] CloseHandle (hObject=0x228) returned 1 [0215.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx", lpFilePart=0x0) returned 0x39 [0215.808] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jTytQUqv5FgW.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jtytquqv5fgw.docx")) returned 1 [0215.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx.EnyBenied", lpFilePart=0x0) returned 0x43 [0215.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0215.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ki1boo9zjhva.pptx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0215.858] GetFileType (hFile=0x238) returned 0x1 [0215.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0215.858] GetFileType (hFile=0x238) returned 0x1 [0216.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx", lpFilePart=0x0) returned 0x39 [0216.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0216.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ki1boo9zjhva.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0216.633] GetFileType (hFile=0x228) returned 0x1 [0216.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0216.633] GetFileType (hFile=0x228) returned 0x1 [0216.633] ReadFile (in: hFile=0x228, lpBuffer=0x27e00d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e00d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0216.640] ReadFile (in: hFile=0x228, lpBuffer=0x27e00d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e00d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0216.640] ReadFile (in: hFile=0x228, lpBuffer=0x27e00d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e00d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0216.640] ReadFile (in: hFile=0x228, lpBuffer=0x27e00d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e00d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0216.641] ReadFile (in: hFile=0x228, lpBuffer=0x27e00d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e00d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0216.641] ReadFile (in: hFile=0x228, lpBuffer=0x27e00d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e00d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0216.641] ReadFile (in: hFile=0x228, lpBuffer=0x27e00d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e00d8*, lpNumberOfBytesRead=0x1add88*=0xe2a, lpOverlapped=0x0) returned 1 [0216.641] ReadFile (in: hFile=0x228, lpBuffer=0x27dfeea, nNumberOfBytesToRead=0x1d6, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dfeea*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0216.641] ReadFile (in: hFile=0x228, lpBuffer=0x27e00d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e00d8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0216.642] CloseHandle (hObject=0x228) returned 1 [0216.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx", lpFilePart=0x0) returned 0x39 [0216.642] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KI1bOo9ZJhVA.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ki1boo9zjhva.pptx")) returned 1 [0216.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx.EnyBenied", lpFilePart=0x0) returned 0x44 [0216.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0216.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l6a-gs8grxubm.pptx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0216.645] GetFileType (hFile=0x238) returned 0x1 [0216.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0216.645] GetFileType (hFile=0x238) returned 0x1 [0217.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx", lpFilePart=0x0) returned 0x3a [0217.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0217.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l6a-gs8grxubm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0217.600] GetFileType (hFile=0x228) returned 0x1 [0217.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0217.601] GetFileType (hFile=0x228) returned 0x1 [0217.601] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0217.672] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0217.674] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0217.674] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x8b2, lpOverlapped=0x0) returned 1 [0217.674] ReadFile (in: hFile=0x228, lpBuffer=0x272e08a, nNumberOfBytesToRead=0x34e, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e08a*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0217.674] ReadFile (in: hFile=0x228, lpBuffer=0x272e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272e3f0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0217.674] CloseHandle (hObject=0x228) returned 1 [0217.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx", lpFilePart=0x0) returned 0x3a [0217.675] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L6a-gS8grxubM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l6a-gs8grxubm.pptx")) returned 1 [0217.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv.EnyBenied", lpFilePart=0x0) returned 0x44 [0217.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0217.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ldkwac6fc6r0zz.csv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0217.679] GetFileType (hFile=0x238) returned 0x1 [0217.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0217.679] GetFileType (hFile=0x238) returned 0x1 [0218.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv", lpFilePart=0x0) returned 0x3a [0218.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0218.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ldkwac6fc6r0zz.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0218.767] GetFileType (hFile=0x228) returned 0x1 [0218.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0218.767] GetFileType (hFile=0x228) returned 0x1 [0218.767] ReadFile (in: hFile=0x228, lpBuffer=0x267d1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x267d1f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0218.772] ReadFile (in: hFile=0x228, lpBuffer=0x267d1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x267d1f8*, lpNumberOfBytesRead=0x1add88*=0x123, lpOverlapped=0x0) returned 1 [0218.772] ReadFile (in: hFile=0x228, lpBuffer=0x267d1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x267d1f8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0218.772] CloseHandle (hObject=0x228) returned 1 [0218.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv", lpFilePart=0x0) returned 0x3a [0218.772] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lDKwaC6Fc6r0zz.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ldkwac6fc6r0zz.csv")) returned 1 [0218.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx.EnyBenied", lpFilePart=0x0) returned 0x3d [0218.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0218.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n9j_4q.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0218.775] GetFileType (hFile=0x238) returned 0x1 [0218.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0218.775] GetFileType (hFile=0x238) returned 0x1 [0219.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx", lpFilePart=0x0) returned 0x33 [0219.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0219.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n9j_4q.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0219.279] GetFileType (hFile=0x228) returned 0x1 [0219.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0219.279] GetFileType (hFile=0x228) returned 0x1 [0219.279] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.285] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.285] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.285] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.285] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.286] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.286] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.286] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.286] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.286] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.287] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.287] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.287] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.287] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.287] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.288] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.288] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.288] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.288] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.288] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.289] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.292] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.293] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.293] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x992, lpOverlapped=0x0) returned 1 [0219.293] ReadFile (in: hFile=0x228, lpBuffer=0x27c5262, nNumberOfBytesToRead=0x26e, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c5262*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0219.293] ReadFile (in: hFile=0x228, lpBuffer=0x27c54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c54e8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0219.293] CloseHandle (hObject=0x228) returned 1 [0219.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx", lpFilePart=0x0) returned 0x33 [0219.293] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n9J_4Q.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n9j_4q.xlsx")) returned 1 [0219.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx.EnyBenied", lpFilePart=0x0) returned 0x44 [0219.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0219.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nepix4hnobgsu.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0219.296] GetFileType (hFile=0x238) returned 0x1 [0219.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0219.297] GetFileType (hFile=0x238) returned 0x1 [0219.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx", lpFilePart=0x0) returned 0x3a [0219.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0219.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nepix4hnobgsu.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0219.646] GetFileType (hFile=0x228) returned 0x1 [0219.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0219.646] GetFileType (hFile=0x228) returned 0x1 [0219.646] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.652] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.652] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.652] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.652] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.653] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.653] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.653] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.653] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.654] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.654] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0219.654] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0xf3b, lpOverlapped=0x0) returned 1 [0219.654] ReadFile (in: hFile=0x228, lpBuffer=0x27248d3, nNumberOfBytesToRead=0xc5, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27248d3*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0219.654] ReadFile (in: hFile=0x228, lpBuffer=0x27249b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27249b0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0219.654] CloseHandle (hObject=0x228) returned 1 [0219.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx", lpFilePart=0x0) returned 0x3a [0219.654] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NEpIx4HNobGSu.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nepix4hnobgsu.docx")) returned 1 [0219.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx.EnyBenied", lpFilePart=0x0) returned 0x4b [0219.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0219.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pyyz7bemiqdw1rk2rgbd.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0219.658] GetFileType (hFile=0x238) returned 0x1 [0219.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0219.658] GetFileType (hFile=0x238) returned 0x1 [0220.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx", lpFilePart=0x0) returned 0x41 [0220.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0220.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pyyz7bemiqdw1rk2rgbd.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0220.077] GetFileType (hFile=0x228) returned 0x1 [0220.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0220.077] GetFileType (hFile=0x228) returned 0x1 [0220.077] ReadFile (in: hFile=0x228, lpBuffer=0x265ca68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ca68*, lpNumberOfBytesRead=0x1add88*=0x496, lpOverlapped=0x0) returned 1 [0220.079] ReadFile (in: hFile=0x228, lpBuffer=0x265c6e6, nNumberOfBytesToRead=0x36a, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265c6e6*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0220.079] ReadFile (in: hFile=0x228, lpBuffer=0x265ca68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ca68*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0220.079] CloseHandle (hObject=0x228) returned 1 [0220.079] WriteFile (in: hFile=0x238, lpBuffer=0x265afe8*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x265afe8*, lpNumberOfBytesWritten=0x1adc58*=0x4c0, lpOverlapped=0x0) returned 1 [0220.080] CloseHandle (hObject=0x238) returned 1 [0220.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx", lpFilePart=0x0) returned 0x41 [0220.081] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PyyZ7bemIQDw1Rk2RGBd.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pyyz7bemiqdw1rk2rgbd.xlsx")) returned 1 [0220.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods.EnyBenied", lpFilePart=0x0) returned 0x45 [0220.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0220.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tjjme x2ghkymyd.ods.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0220.083] GetFileType (hFile=0x238) returned 0x1 [0220.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0220.083] GetFileType (hFile=0x238) returned 0x1 [0220.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods", lpFilePart=0x0) returned 0x3b [0220.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0220.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tjjme x2ghkymyd.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0220.547] GetFileType (hFile=0x228) returned 0x1 [0220.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0220.547] GetFileType (hFile=0x228) returned 0x1 [0220.547] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.553] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.554] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.554] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.554] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.555] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.555] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.555] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.555] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.556] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.556] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.556] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.556] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.557] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.557] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.557] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.558] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.558] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.558] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0220.558] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x45c, lpOverlapped=0x0) returned 1 [0220.559] ReadFile (in: hFile=0x228, lpBuffer=0x27a3d7c, nNumberOfBytesToRead=0x3a4, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a3d7c*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0220.559] ReadFile (in: hFile=0x228, lpBuffer=0x27a4138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4138*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0220.559] CloseHandle (hObject=0x228) returned 1 [0220.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods", lpFilePart=0x0) returned 0x3b [0220.559] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tjjME X2GhkYMyD.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tjjme x2ghkymyd.ods")) returned 1 [0220.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc.EnyBenied", lpFilePart=0x0) returned 0x49 [0220.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0220.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tuicgjzyk7iploj0ghw.doc.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0220.563] GetFileType (hFile=0x238) returned 0x1 [0220.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0220.563] GetFileType (hFile=0x238) returned 0x1 [0221.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc", lpFilePart=0x0) returned 0x3f [0221.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0221.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tuicgjzyk7iploj0ghw.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0221.075] GetFileType (hFile=0x228) returned 0x1 [0221.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0221.075] GetFileType (hFile=0x228) returned 0x1 [0221.075] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.081] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.082] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.082] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.082] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.083] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.090] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.091] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.091] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.091] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.092] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.092] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.092] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.092] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.093] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.093] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.093] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.094] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.094] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.094] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.094] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x3e7, lpOverlapped=0x0) returned 1 [0221.095] ReadFile (in: hFile=0x228, lpBuffer=0x26fefa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26fefa8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0221.095] CloseHandle (hObject=0x228) returned 1 [0221.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc", lpFilePart=0x0) returned 0x3f [0221.095] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tuIcgjZyk7iPLOJ0GHW.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tuicgjzyk7iploj0ghw.doc")) returned 1 [0221.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx.EnyBenied", lpFilePart=0x0) returned 0x42 [0221.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0221.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\urpoc p5bnw.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0221.102] GetFileType (hFile=0x238) returned 0x1 [0221.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0221.103] GetFileType (hFile=0x238) returned 0x1 [0221.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx", lpFilePart=0x0) returned 0x38 [0221.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0221.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\urpoc p5bnw.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0221.609] GetFileType (hFile=0x228) returned 0x1 [0221.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0221.609] GetFileType (hFile=0x228) returned 0x1 [0221.609] ReadFile (in: hFile=0x228, lpBuffer=0x265ad68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ad68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.615] ReadFile (in: hFile=0x228, lpBuffer=0x265ad68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ad68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.615] ReadFile (in: hFile=0x228, lpBuffer=0x265ad68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ad68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.615] ReadFile (in: hFile=0x228, lpBuffer=0x265ad68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ad68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0221.615] ReadFile (in: hFile=0x228, lpBuffer=0x265ad68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ad68*, lpNumberOfBytesRead=0x1add88*=0xa6a, lpOverlapped=0x0) returned 1 [0221.616] ReadFile (in: hFile=0x228, lpBuffer=0x265abba, nNumberOfBytesToRead=0x196, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265abba*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0221.616] ReadFile (in: hFile=0x228, lpBuffer=0x265ad68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x265ad68*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0221.616] CloseHandle (hObject=0x228) returned 1 [0221.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx", lpFilePart=0x0) returned 0x38 [0221.616] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\urPoC p5BnW.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\urpoc p5bnw.docx")) returned 1 [0221.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf.EnyBenied", lpFilePart=0x0) returned 0x3e [0221.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0221.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xv-wzlz4.rtf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0221.619] GetFileType (hFile=0x238) returned 0x1 [0221.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0221.619] GetFileType (hFile=0x238) returned 0x1 [0222.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf", lpFilePart=0x0) returned 0x34 [0222.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0222.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xv-wzlz4.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0222.157] GetFileType (hFile=0x228) returned 0x1 [0222.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0222.157] GetFileType (hFile=0x228) returned 0x1 [0222.157] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.165] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.165] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.165] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.166] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.170] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.170] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.170] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.170] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.171] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0222.171] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0xefd, lpOverlapped=0x0) returned 1 [0222.171] ReadFile (in: hFile=0x228, lpBuffer=0x27a6a0d, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6a0d*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0222.171] ReadFile (in: hFile=0x228, lpBuffer=0x27a6b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a6b28*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0222.171] CloseHandle (hObject=0x228) returned 1 [0222.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf", lpFilePart=0x0) returned 0x34 [0222.173] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xV-wZLZ4.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xv-wzlz4.rtf")) returned 1 [0222.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0222.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC", lpFilePart=0x0) returned 0x3c [0222.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\", lpFilePart=0x0) returned 0x3d [0222.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0222.176] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.176] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.176] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.176] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.177] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.177] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.177] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0222.177] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0222.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0222.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0222.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0222.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC", lpFilePart=0x0) returned 0x3c [0222.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\", lpFilePart=0x0) returned 0x3d [0222.177] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2e0780 [0222.178] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.178] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.178] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.178] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.178] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.178] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0222.178] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0222.179] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0222.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0222.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0222.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt.EnyBenied", lpFilePart=0x0) returned 0x50 [0222.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0222.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\pfc-y.ppt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0222.181] GetFileType (hFile=0x238) returned 0x1 [0222.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0222.181] GetFileType (hFile=0x238) returned 0x1 [0222.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt", lpFilePart=0x0) returned 0x46 [0222.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0222.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\pfc-y.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0222.682] GetFileType (hFile=0x228) returned 0x1 [0222.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0222.682] GetFileType (hFile=0x228) returned 0x1 [0222.682] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.687] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.688] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.688] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.688] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.688] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.688] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.689] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.689] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.689] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.689] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.690] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.690] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.690] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.691] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.691] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.691] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.691] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.692] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0222.692] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0xfdb, lpOverlapped=0x0) returned 1 [0222.692] ReadFile (in: hFile=0x228, lpBuffer=0x270b4f3, nNumberOfBytesToRead=0x25, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b4f3*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0222.692] ReadFile (in: hFile=0x228, lpBuffer=0x270b530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x270b530*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0222.692] CloseHandle (hObject=0x228) returned 1 [0222.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt", lpFilePart=0x0) returned 0x46 [0222.693] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\pFc-y.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\pfc-y.ppt")) returned 1 [0222.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0222.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_", lpFilePart=0x0) returned 0x4c [0222.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\", lpFilePart=0x0) returned 0x4d [0222.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0222.695] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.695] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.695] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.695] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.695] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.695] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.695] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.695] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0222.696] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0222.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0222.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0222.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0222.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_", lpFilePart=0x0) returned 0x4c [0222.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\", lpFilePart=0x0) returned 0x4d [0222.696] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2e0780 [0222.696] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.696] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.696] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.696] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.697] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.697] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.697] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0222.697] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0222.697] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0222.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0222.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0222.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls.EnyBenied", lpFilePart=0x0) returned 0x62 [0222.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0222.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\7tyz vy.xls.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0222.699] GetFileType (hFile=0x238) returned 0x1 [0222.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0222.699] GetFileType (hFile=0x238) returned 0x1 [0223.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls", lpFilePart=0x0) returned 0x58 [0223.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0223.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\7tyz vy.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0223.180] GetFileType (hFile=0x228) returned 0x1 [0223.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0223.180] GetFileType (hFile=0x228) returned 0x1 [0223.180] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.186] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.186] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.187] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.187] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.187] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.188] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.188] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0xecf, lpOverlapped=0x0) returned 1 [0223.188] ReadFile (in: hFile=0x228, lpBuffer=0x266b937, nNumberOfBytesToRead=0x131, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266b937*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0223.196] ReadFile (in: hFile=0x228, lpBuffer=0x266ba80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x266ba80*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0223.196] CloseHandle (hObject=0x228) returned 1 [0223.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls", lpFilePart=0x0) returned 0x58 [0223.196] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\7Tyz vY.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\7tyz vy.xls")) returned 1 [0223.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx.EnyBenied", lpFilePart=0x0) returned 0x6a [0223.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0223.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ox862s ax1arqn.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0223.200] GetFileType (hFile=0x238) returned 0x1 [0223.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0223.200] GetFileType (hFile=0x238) returned 0x1 [0223.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx", lpFilePart=0x0) returned 0x60 [0223.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0223.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ox862s ax1arqn.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0223.553] GetFileType (hFile=0x228) returned 0x1 [0223.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0223.553] GetFileType (hFile=0x228) returned 0x1 [0223.553] ReadFile (in: hFile=0x228, lpBuffer=0x27baf78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27baf78*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.557] ReadFile (in: hFile=0x228, lpBuffer=0x27baf78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27baf78*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.558] ReadFile (in: hFile=0x228, lpBuffer=0x27baf78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27baf78*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0223.559] ReadFile (in: hFile=0x228, lpBuffer=0x27baf78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27baf78*, lpNumberOfBytesRead=0x1adc88*=0xd2c, lpOverlapped=0x0) returned 1 [0223.559] ReadFile (in: hFile=0x228, lpBuffer=0x27bac8c, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27bac8c*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0223.559] ReadFile (in: hFile=0x228, lpBuffer=0x27baf78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x27baf78*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0223.559] CloseHandle (hObject=0x228) returned 1 [0223.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx", lpFilePart=0x0) returned 0x60 [0223.559] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ox862S ax1ARqn.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ox862s ax1arqn.xlsx")) returned 1 [0223.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf.EnyBenied", lpFilePart=0x0) returned 0x6d [0223.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0223.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\sakd5cu_ww8apc-iji.pdf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0223.599] GetFileType (hFile=0x238) returned 0x1 [0223.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0223.599] GetFileType (hFile=0x238) returned 0x1 [0224.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf", lpFilePart=0x0) returned 0x63 [0224.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0224.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\sakd5cu_ww8apc-iji.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0224.025] GetFileType (hFile=0x228) returned 0x1 [0224.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0224.025] GetFileType (hFile=0x228) returned 0x1 [0224.025] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.031] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.031] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.031] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.032] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.033] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.033] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.033] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.033] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0224.033] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0xbfc, lpOverlapped=0x0) returned 1 [0224.034] ReadFile (in: hFile=0x228, lpBuffer=0x270622c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270622c*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0224.034] ReadFile (in: hFile=0x228, lpBuffer=0x2706248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2706248*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0224.034] CloseHandle (hObject=0x228) returned 1 [0224.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf", lpFilePart=0x0) returned 0x63 [0224.034] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\SakD5cu_WW8aPc-iJi.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\sakd5cu_ww8apc-iji.pdf")) returned 1 [0224.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0224.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1", lpFilePart=0x0) returned 0x5c [0224.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\", lpFilePart=0x0) returned 0x5d [0224.036] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0224.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.036] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.037] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0224.037] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0224.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0224.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0224.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0224.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1", lpFilePart=0x0) returned 0x5c [0224.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\", lpFilePart=0x0) returned 0x5d [0224.038] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2e0780 [0224.038] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.038] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.038] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.038] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.039] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.039] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.039] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.039] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.039] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.039] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.040] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.040] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0224.040] FindNextFileW (in: hFindFile=0x2e0780, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0224.040] FindClose (in: hFindFile=0x2e0780 | out: hFindFile=0x2e0780) returned 1 [0224.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0224.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0224.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt.EnyBenied", lpFilePart=0x0) returned 0x79 [0224.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0224.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\1tzq9mrtml82fi.odt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0224.042] GetFileType (hFile=0x238) returned 0x1 [0224.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0224.042] GetFileType (hFile=0x238) returned 0x1 [0224.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt", lpFilePart=0x0) returned 0x6f [0224.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0224.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\1tzq9mrtml82fi.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0224.494] GetFileType (hFile=0x228) returned 0x1 [0224.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0224.495] GetFileType (hFile=0x228) returned 0x1 [0224.495] ReadFile (in: hFile=0x228, lpBuffer=0x265e858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265e858*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.507] ReadFile (in: hFile=0x228, lpBuffer=0x265e858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265e858*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.507] ReadFile (in: hFile=0x228, lpBuffer=0x265e858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265e858*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.507] ReadFile (in: hFile=0x228, lpBuffer=0x265e858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265e858*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.507] ReadFile (in: hFile=0x228, lpBuffer=0x265e858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265e858*, lpNumberOfBytesRead=0x1adc08*=0x282, lpOverlapped=0x0) returned 1 [0224.507] ReadFile (in: hFile=0x228, lpBuffer=0x265e858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265e858*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0224.507] CloseHandle (hObject=0x228) returned 1 [0224.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt", lpFilePart=0x0) returned 0x6f [0224.508] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\1Tzq9mrtml82FI.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\1tzq9mrtml82fi.odt")) returned 1 [0224.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls.EnyBenied", lpFilePart=0x0) returned 0x7f [0224.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0224.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\9uyvp485oproc1y4mm-n.xls.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0224.510] GetFileType (hFile=0x238) returned 0x1 [0224.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0224.510] GetFileType (hFile=0x238) returned 0x1 [0224.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls", lpFilePart=0x0) returned 0x75 [0224.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0224.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\9uyvp485oproc1y4mm-n.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0224.963] GetFileType (hFile=0x228) returned 0x1 [0224.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0224.963] GetFileType (hFile=0x228) returned 0x1 [0224.963] ReadFile (in: hFile=0x228, lpBuffer=0x27aa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aa0a8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.969] ReadFile (in: hFile=0x228, lpBuffer=0x27aa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aa0a8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.969] ReadFile (in: hFile=0x228, lpBuffer=0x27aa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aa0a8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.969] ReadFile (in: hFile=0x228, lpBuffer=0x27aa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aa0a8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.970] ReadFile (in: hFile=0x228, lpBuffer=0x27aa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aa0a8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.970] ReadFile (in: hFile=0x228, lpBuffer=0x27aa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aa0a8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0224.970] ReadFile (in: hFile=0x228, lpBuffer=0x27aa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aa0a8*, lpNumberOfBytesRead=0x1adc08*=0x4ca, lpOverlapped=0x0) returned 1 [0224.970] ReadFile (in: hFile=0x228, lpBuffer=0x27a9d5a, nNumberOfBytesToRead=0x336, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27a9d5a*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0224.970] ReadFile (in: hFile=0x228, lpBuffer=0x27aa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aa0a8*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0224.970] CloseHandle (hObject=0x228) returned 1 [0224.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls", lpFilePart=0x0) returned 0x75 [0224.970] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\9UyvP485OpRoc1y4mm-n.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\9uyvp485oproc1y4mm-n.xls")) returned 1 [0224.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt.EnyBenied", lpFilePart=0x0) returned 0x77 [0224.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0224.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\aod -h84gzud.odt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0224.973] GetFileType (hFile=0x238) returned 0x1 [0224.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0224.973] GetFileType (hFile=0x238) returned 0x1 [0225.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt", lpFilePart=0x0) returned 0x6d [0225.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0225.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\aod -h84gzud.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0225.375] GetFileType (hFile=0x228) returned 0x1 [0225.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0225.375] GetFileType (hFile=0x228) returned 0x1 [0225.375] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.381] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.381] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.382] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.382] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.382] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.383] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.383] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.383] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.383] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.384] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.384] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x53b, lpOverlapped=0x0) returned 1 [0225.384] ReadFile (in: hFile=0x228, lpBuffer=0x26f7953, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7953*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0225.384] ReadFile (in: hFile=0x228, lpBuffer=0x26f7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f7c30*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0225.384] CloseHandle (hObject=0x228) returned 1 [0225.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt", lpFilePart=0x0) returned 0x6d [0225.384] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\AOD -H84GZuD.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\aod -h84gzud.odt")) returned 1 [0225.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx.EnyBenied", lpFilePart=0x0) returned 0x78 [0225.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0225.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\d5oo1yhe-dgz.docx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0225.387] GetFileType (hFile=0x238) returned 0x1 [0225.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0225.388] GetFileType (hFile=0x238) returned 0x1 [0225.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx", lpFilePart=0x0) returned 0x6e [0225.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0225.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\d5oo1yhe-dgz.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0225.806] GetFileType (hFile=0x228) returned 0x1 [0225.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0225.806] GetFileType (hFile=0x228) returned 0x1 [0225.806] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.817] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.817] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.818] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.818] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.818] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.818] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.818] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.819] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.819] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.819] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0225.819] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x411, lpOverlapped=0x0) returned 1 [0225.819] ReadFile (in: hFile=0x228, lpBuffer=0x264a659, nNumberOfBytesToRead=0x3ef, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264a659*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0225.819] ReadFile (in: hFile=0x228, lpBuffer=0x264aa60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x264aa60*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0225.819] CloseHandle (hObject=0x228) returned 1 [0225.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx", lpFilePart=0x0) returned 0x6e [0225.820] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\d5oO1YHe-dGz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\d5oo1yhe-dgz.docx")) returned 1 [0225.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp.EnyBenied", lpFilePart=0x0) returned 0x73 [0225.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0225.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\i1uw40ut.odp.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0225.823] GetFileType (hFile=0x238) returned 0x1 [0225.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0225.823] GetFileType (hFile=0x238) returned 0x1 [0226.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp", lpFilePart=0x0) returned 0x69 [0226.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0226.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\i1uw40ut.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0226.199] GetFileType (hFile=0x228) returned 0x1 [0226.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0226.199] GetFileType (hFile=0x228) returned 0x1 [0226.199] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.206] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.207] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.207] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.207] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.208] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.208] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.208] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.208] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.209] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.209] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.209] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.210] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.210] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.210] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.210] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0xfad, lpOverlapped=0x0) returned 1 [0226.211] ReadFile (in: hFile=0x228, lpBuffer=0x279d5ed, nNumberOfBytesToRead=0x53, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d5ed*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0226.211] ReadFile (in: hFile=0x228, lpBuffer=0x279d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0226.211] CloseHandle (hObject=0x228) returned 1 [0226.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp", lpFilePart=0x0) returned 0x69 [0226.211] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\i1uw40Ut.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\i1uw40ut.odp")) returned 1 [0226.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp.EnyBenied", lpFilePart=0x0) returned 0x71 [0226.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0226.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\lnunbg.odp.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0226.215] GetFileType (hFile=0x238) returned 0x1 [0226.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0226.215] GetFileType (hFile=0x238) returned 0x1 [0226.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp", lpFilePart=0x0) returned 0x67 [0226.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0226.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\lnunbg.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0226.749] GetFileType (hFile=0x228) returned 0x1 [0226.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0226.749] GetFileType (hFile=0x228) returned 0x1 [0226.749] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.754] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.755] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.755] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.755] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.755] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.756] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.756] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.756] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.756] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.756] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.756] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0226.757] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x1c3, lpOverlapped=0x0) returned 1 [0226.757] ReadFile (in: hFile=0x228, lpBuffer=0x26f5008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f5008*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0226.757] CloseHandle (hObject=0x228) returned 1 [0226.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp", lpFilePart=0x0) returned 0x67 [0226.757] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\lnuNbg.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\lnunbg.odp")) returned 1 [0226.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf.EnyBenied", lpFilePart=0x0) returned 0x7c [0226.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0226.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\qbm80pbykabpvupzb.pdf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0226.760] GetFileType (hFile=0x238) returned 0x1 [0226.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0226.760] GetFileType (hFile=0x238) returned 0x1 [0227.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf", lpFilePart=0x0) returned 0x72 [0227.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0227.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\qbm80pbykabpvupzb.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0227.254] GetFileType (hFile=0x228) returned 0x1 [0227.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0227.254] GetFileType (hFile=0x228) returned 0x1 [0227.254] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.260] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.261] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.261] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.261] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.261] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.262] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.262] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.262] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.263] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.272] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.272] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.272] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.272] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.273] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x27a, lpOverlapped=0x0) returned 1 [0227.273] ReadFile (in: hFile=0x228, lpBuffer=0x2648688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2648688*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0227.273] CloseHandle (hObject=0x228) returned 1 [0227.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf", lpFilePart=0x0) returned 0x72 [0227.273] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\QBM80pbYKaBpvupzB.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\qbm80pbykabpvupzb.pdf")) returned 1 [0227.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods.EnyBenied", lpFilePart=0x0) returned 0x6f [0227.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0227.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\ramp.ods.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0227.277] GetFileType (hFile=0x238) returned 0x1 [0227.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0227.277] GetFileType (hFile=0x238) returned 0x1 [0227.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods", lpFilePart=0x0) returned 0x65 [0227.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0227.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\ramp.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0227.773] GetFileType (hFile=0x228) returned 0x1 [0227.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0227.773] GetFileType (hFile=0x228) returned 0x1 [0227.773] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.778] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.779] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.779] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.779] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.779] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.780] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.780] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.780] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.780] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.780] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.780] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.781] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.781] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.781] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.781] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.781] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.782] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.782] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.782] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.783] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0227.783] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x5c8, lpOverlapped=0x0) returned 1 [0227.783] ReadFile (in: hFile=0x228, lpBuffer=0x279d9d0, nNumberOfBytesToRead=0x238, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279d9d0*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0227.783] ReadFile (in: hFile=0x228, lpBuffer=0x279dc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x279dc20*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0227.783] CloseHandle (hObject=0x228) returned 1 [0227.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods", lpFilePart=0x0) returned 0x65 [0227.783] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\RAmp.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\ramp.ods")) returned 1 [0227.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx.EnyBenied", lpFilePart=0x0) returned 0x70 [0227.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0227.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\snlq.xlsx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0227.787] GetFileType (hFile=0x238) returned 0x1 [0227.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0227.788] GetFileType (hFile=0x238) returned 0x1 [0228.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx", lpFilePart=0x0) returned 0x66 [0228.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0228.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\snlq.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0228.238] GetFileType (hFile=0x228) returned 0x1 [0228.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0228.238] GetFileType (hFile=0x228) returned 0x1 [0228.238] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.245] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.246] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.246] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.246] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.247] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.247] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.247] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.247] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.248] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.248] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.248] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.249] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.249] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x266, lpOverlapped=0x0) returned 1 [0228.249] ReadFile (in: hFile=0x228, lpBuffer=0x26f9178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26f9178*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0228.249] CloseHandle (hObject=0x228) returned 1 [0228.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx", lpFilePart=0x0) returned 0x66 [0228.250] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\SNLQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\snlq.xlsx")) returned 1 [0228.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\ENYBENY.TXT", lpFilePart=0x0) returned 0x68 [0228.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0228.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0228.255] GetFileType (hFile=0x238) returned 0x1 [0228.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0228.255] GetFileType (hFile=0x238) returned 0x1 [0228.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\ENYBENY.png", lpFilePart=0x0) returned 0x68 [0228.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0228.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0228.257] GetFileType (hFile=0x238) returned 0x1 [0228.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0228.257] GetFileType (hFile=0x238) returned 0x1 [0228.257] WriteFile (in: hFile=0x238, lpBuffer=0x2712018*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2712018*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0228.259] CloseHandle (hObject=0x238) returned 1 [0228.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x93 [0228.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0228.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ky_SJZFOr jIss1\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ky_sjzfor jiss1\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0228.259] GetFileType (hFile=0x238) returned 0x1 [0228.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0228.259] GetFileType (hFile=0x238) returned 0x1 [0228.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0228.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0", lpFilePart=0x0) returned 0x54 [0228.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\", lpFilePart=0x0) returned 0x55 [0228.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0228.261] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.261] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.261] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.261] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.262] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.262] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.262] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0228.262] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0228.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0228.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0228.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0228.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0", lpFilePart=0x0) returned 0x54 [0228.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\", lpFilePart=0x0) returned 0x55 [0228.262] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0228.262] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.263] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.263] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.263] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.263] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.263] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0228.263] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0228.264] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0228.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0228.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0228.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf.EnyBenied", lpFilePart=0x0) returned 0x6d [0228.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0228.265] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\nhdxk4dboj.rtf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0228.265] GetFileType (hFile=0x238) returned 0x1 [0228.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0228.265] GetFileType (hFile=0x238) returned 0x1 [0228.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf", lpFilePart=0x0) returned 0x63 [0228.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0228.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\nhdxk4dboj.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0228.828] GetFileType (hFile=0x228) returned 0x1 [0228.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0228.828] GetFileType (hFile=0x228) returned 0x1 [0228.828] ReadFile (in: hFile=0x228, lpBuffer=0x2662c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662c60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.834] ReadFile (in: hFile=0x228, lpBuffer=0x2662c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662c60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.834] ReadFile (in: hFile=0x228, lpBuffer=0x2662c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662c60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.834] ReadFile (in: hFile=0x228, lpBuffer=0x2662c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662c60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.834] ReadFile (in: hFile=0x228, lpBuffer=0x2662c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662c60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.835] ReadFile (in: hFile=0x228, lpBuffer=0x2662c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662c60*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0228.835] ReadFile (in: hFile=0x228, lpBuffer=0x2662c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662c60*, lpNumberOfBytesRead=0x1adc08*=0x5e2, lpOverlapped=0x0) returned 1 [0228.835] ReadFile (in: hFile=0x228, lpBuffer=0x2662a2a, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662a2a*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0228.835] ReadFile (in: hFile=0x228, lpBuffer=0x2662c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2662c60*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0228.835] CloseHandle (hObject=0x228) returned 1 [0228.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf", lpFilePart=0x0) returned 0x63 [0228.835] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\nHdxk4dBoJ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\nhdxk4dboj.rtf")) returned 1 [0228.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv.EnyBenied", lpFilePart=0x0) returned 0x72 [0228.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0228.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\qjisoya88mivqxi.csv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0228.838] GetFileType (hFile=0x238) returned 0x1 [0228.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0228.838] GetFileType (hFile=0x238) returned 0x1 [0229.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv", lpFilePart=0x0) returned 0x68 [0229.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0229.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\qjisoya88mivqxi.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0229.242] GetFileType (hFile=0x228) returned 0x1 [0229.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0229.242] GetFileType (hFile=0x228) returned 0x1 [0229.242] ReadFile (in: hFile=0x228, lpBuffer=0x27aec60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aec60*, lpNumberOfBytesRead=0x1adc08*=0xf29, lpOverlapped=0x0) returned 1 [0229.246] ReadFile (in: hFile=0x228, lpBuffer=0x27aeb71, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aeb71*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0229.247] ReadFile (in: hFile=0x228, lpBuffer=0x27aec60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x27aec60*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0229.247] CloseHandle (hObject=0x228) returned 1 [0229.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv", lpFilePart=0x0) returned 0x68 [0229.248] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\QjIsOya88mivqxI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\qjisoya88mivqxi.csv")) returned 1 [0229.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx.EnyBenied", lpFilePart=0x0) returned 0x6b [0229.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0229.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\tqoun y.pptx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0229.251] GetFileType (hFile=0x238) returned 0x1 [0229.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0229.251] GetFileType (hFile=0x238) returned 0x1 [0229.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx", lpFilePart=0x0) returned 0x61 [0229.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0229.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\tqoun y.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0229.801] GetFileType (hFile=0x228) returned 0x1 [0229.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0229.801] GetFileType (hFile=0x228) returned 0x1 [0229.801] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.814] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.814] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.814] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.815] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.815] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.815] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.815] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.816] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.816] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.816] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.816] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.817] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.817] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.817] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.817] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0229.817] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0xa3b, lpOverlapped=0x0) returned 1 [0229.817] ReadFile (in: hFile=0x228, lpBuffer=0x26d5c3b, nNumberOfBytesToRead=0x1c5, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5c3b*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0229.818] ReadFile (in: hFile=0x228, lpBuffer=0x26d5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26d5e18*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0229.818] CloseHandle (hObject=0x228) returned 1 [0229.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx", lpFilePart=0x0) returned 0x61 [0229.818] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tqoUN Y.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\tqoun y.pptx")) returned 1 [0229.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx.EnyBenied", lpFilePart=0x0) returned 0x75 [0229.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0229.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\twmgnczj-f8gybdxm.pptx.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0229.821] GetFileType (hFile=0x238) returned 0x1 [0229.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0229.821] GetFileType (hFile=0x238) returned 0x1 [0230.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx", lpFilePart=0x0) returned 0x6b [0230.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0230.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\twmgnczj-f8gybdxm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0230.270] GetFileType (hFile=0x228) returned 0x1 [0230.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0230.270] GetFileType (hFile=0x228) returned 0x1 [0230.270] ReadFile (in: hFile=0x228, lpBuffer=0x262cbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x262cbe8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.277] ReadFile (in: hFile=0x228, lpBuffer=0x262cbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x262cbe8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.277] ReadFile (in: hFile=0x228, lpBuffer=0x262cbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x262cbe8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.277] ReadFile (in: hFile=0x228, lpBuffer=0x262cbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x262cbe8*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.278] ReadFile (in: hFile=0x228, lpBuffer=0x262cbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x262cbe8*, lpNumberOfBytesRead=0x1adc08*=0xca5, lpOverlapped=0x0) returned 1 [0230.278] ReadFile (in: hFile=0x228, lpBuffer=0x262c875, nNumberOfBytesToRead=0x35b, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x262c875*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0230.278] ReadFile (in: hFile=0x228, lpBuffer=0x262cbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x262cbe8*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0230.278] CloseHandle (hObject=0x228) returned 1 [0230.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx", lpFilePart=0x0) returned 0x6b [0230.278] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\tWmgnCZJ-F8GybdxM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\twmgnczj-f8gybdxm.pptx")) returned 1 [0230.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv.EnyBenied", lpFilePart=0x0) returned 0x68 [0230.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0230.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\vmr9z.csv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0230.282] GetFileType (hFile=0x238) returned 0x1 [0230.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0230.282] GetFileType (hFile=0x238) returned 0x1 [0230.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv", lpFilePart=0x0) returned 0x5e [0230.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0230.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\vmr9z.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0230.738] GetFileType (hFile=0x228) returned 0x1 [0230.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0230.738] GetFileType (hFile=0x228) returned 0x1 [0230.738] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.744] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.745] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.745] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.745] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.745] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.746] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.746] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.746] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0230.746] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0xf0, lpOverlapped=0x0) returned 1 [0230.746] ReadFile (in: hFile=0x228, lpBuffer=0x2778dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2778dc0*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0230.747] CloseHandle (hObject=0x228) returned 1 [0230.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv", lpFilePart=0x0) returned 0x5e [0230.747] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\VmR9Z.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\vmr9z.csv")) returned 1 [0230.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0230.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0230.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0230.751] GetFileType (hFile=0x238) returned 0x1 [0230.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0230.751] GetFileType (hFile=0x238) returned 0x1 [0230.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0230.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0230.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0230.753] GetFileType (hFile=0x238) returned 0x1 [0230.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0230.753] GetFileType (hFile=0x238) returned 0x1 [0230.753] WriteFile (in: hFile=0x238, lpBuffer=0x278d908*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x278d908*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0230.755] CloseHandle (hObject=0x238) returned 1 [0230.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0230.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0230.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\Ukfw1M0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\ukfw1m0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0230.756] GetFileType (hFile=0x238) returned 0x1 [0230.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0230.756] GetFileType (hFile=0x238) returned 0x1 [0230.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0230.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO", lpFilePart=0x0) returned 0x54 [0230.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\", lpFilePart=0x0) returned 0x55 [0230.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0230.757] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.757] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.758] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.758] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.758] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.758] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0230.758] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0230.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0230.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0230.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0230.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO", lpFilePart=0x0) returned 0x54 [0230.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\", lpFilePart=0x0) returned 0x55 [0230.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0230.759] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.759] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.759] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.759] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.759] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0230.760] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0230.760] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0230.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0230.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0230.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf.EnyBenied", lpFilePart=0x0) returned 0x71 [0230.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0230.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\fhyvlbr1it0ctd.rtf.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0230.761] GetFileType (hFile=0x238) returned 0x1 [0230.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0230.761] GetFileType (hFile=0x238) returned 0x1 [0231.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf", lpFilePart=0x0) returned 0x67 [0231.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0231.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\fhyvlbr1it0ctd.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0231.359] GetFileType (hFile=0x228) returned 0x1 [0231.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0231.359] GetFileType (hFile=0x228) returned 0x1 [0231.359] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.362] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.366] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.367] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.367] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.367] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.368] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.368] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.368] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.369] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.369] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.369] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.369] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0231.370] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x6e0, lpOverlapped=0x0) returned 1 [0231.370] ReadFile (in: hFile=0x228, lpBuffer=0x26dfa60, nNumberOfBytesToRead=0x120, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfa60*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0231.370] ReadFile (in: hFile=0x228, lpBuffer=0x26dfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x26dfb98*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0231.370] CloseHandle (hObject=0x228) returned 1 [0231.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf", lpFilePart=0x0) returned 0x67 [0231.370] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\fHyVlbr1it0cTd.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\fhyvlbr1it0ctd.rtf")) returned 1 [0231.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods.EnyBenied", lpFilePart=0x0) returned 0x69 [0231.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0231.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\riy1r0.ods.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0231.374] GetFileType (hFile=0x238) returned 0x1 [0231.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0231.374] GetFileType (hFile=0x238) returned 0x1 [0232.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods", lpFilePart=0x0) returned 0x5f [0232.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0232.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\riy1r0.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0232.394] GetFileType (hFile=0x228) returned 0x1 [0232.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0232.394] GetFileType (hFile=0x228) returned 0x1 [0232.394] ReadFile (in: hFile=0x228, lpBuffer=0x2634b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2634b48*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.400] ReadFile (in: hFile=0x228, lpBuffer=0x2634b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2634b48*, lpNumberOfBytesRead=0x1adc08*=0x8eb, lpOverlapped=0x0) returned 1 [0232.400] ReadFile (in: hFile=0x228, lpBuffer=0x263481b, nNumberOfBytesToRead=0x315, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x263481b*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0232.401] ReadFile (in: hFile=0x228, lpBuffer=0x2634b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2634b48*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0232.401] CloseHandle (hObject=0x228) returned 1 [0232.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods", lpFilePart=0x0) returned 0x5f [0232.401] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\rIy1R0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\riy1r0.ods")) returned 1 [0232.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt.EnyBenied", lpFilePart=0x0) returned 0x6b [0232.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0232.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\ybdjv h5.odt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0232.404] GetFileType (hFile=0x238) returned 0x1 [0232.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0232.405] GetFileType (hFile=0x238) returned 0x1 [0232.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt", lpFilePart=0x0) returned 0x61 [0232.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0232.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\ybdjv h5.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0232.888] GetFileType (hFile=0x228) returned 0x1 [0232.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0232.888] GetFileType (hFile=0x228) returned 0x1 [0232.888] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.894] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.894] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.894] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.895] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.895] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.895] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.895] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.896] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.896] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.896] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.896] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.897] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.897] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.897] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.897] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.898] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0232.898] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x63a, lpOverlapped=0x0) returned 1 [0232.898] ReadFile (in: hFile=0x228, lpBuffer=0x277d662, nNumberOfBytesToRead=0x1c6, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d662*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0232.898] ReadFile (in: hFile=0x228, lpBuffer=0x277d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x277d840*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0232.898] CloseHandle (hObject=0x228) returned 1 [0232.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt", lpFilePart=0x0) returned 0x61 [0232.899] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\YbDJV h5.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\ybdjv h5.odt")) returned 1 [0232.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\ENYBENY.TXT", lpFilePart=0x0) returned 0x60 [0232.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0232.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0232.904] GetFileType (hFile=0x238) returned 0x1 [0232.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0232.904] GetFileType (hFile=0x238) returned 0x1 [0232.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\ENYBENY.png", lpFilePart=0x0) returned 0x60 [0232.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0232.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0232.906] GetFileType (hFile=0x238) returned 0x1 [0232.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0232.906] GetFileType (hFile=0x238) returned 0x1 [0232.906] WriteFile (in: hFile=0x238, lpBuffer=0x279abe0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x279abe0*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0232.907] CloseHandle (hObject=0x238) returned 1 [0232.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x8b [0232.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0232.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\_K4eYKO\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\_k4eyko\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0232.908] GetFileType (hFile=0x238) returned 0x1 [0232.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0232.908] GetFileType (hFile=0x238) returned 0x1 [0232.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\ENYBENY.TXT", lpFilePart=0x0) returned 0x58 [0232.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0232.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0232.909] GetFileType (hFile=0x238) returned 0x1 [0232.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0232.909] GetFileType (hFile=0x238) returned 0x1 [0232.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\ENYBENY.png", lpFilePart=0x0) returned 0x58 [0232.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0232.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0232.911] GetFileType (hFile=0x238) returned 0x1 [0232.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0232.911] GetFileType (hFile=0x238) returned 0x1 [0232.911] WriteFile (in: hFile=0x238, lpBuffer=0x27ace38*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x27ace38*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0232.912] CloseHandle (hObject=0x238) returned 1 [0232.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x83 [0232.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0232.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ocE1G6DtW9CSZl_\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oce1g6dtw9cszl_\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0232.913] GetFileType (hFile=0x238) returned 0x1 [0232.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0232.913] GetFileType (hFile=0x238) returned 0x1 [0232.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0232.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds", lpFilePart=0x0) returned 0x43 [0232.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\", lpFilePart=0x0) returned 0x44 [0232.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0232.914] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0232.914] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0232.915] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0232.915] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0232.915] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0232.915] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0232.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0232.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0232.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0232.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds", lpFilePart=0x0) returned 0x43 [0232.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\", lpFilePart=0x0) returned 0x44 [0232.915] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0232.915] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0232.916] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0232.916] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0232.916] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0232.916] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0232.916] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0232.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0232.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0232.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt.EnyBenied", lpFilePart=0x0) returned 0x5a [0232.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0232.917] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\lgqtuetk.ppt.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0232.929] GetFileType (hFile=0x238) returned 0x1 [0232.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0232.929] GetFileType (hFile=0x238) returned 0x1 [0233.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt", lpFilePart=0x0) returned 0x50 [0233.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0233.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\lgqtuetk.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0233.377] GetFileType (hFile=0x228) returned 0x1 [0233.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0233.377] GetFileType (hFile=0x228) returned 0x1 [0233.377] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.383] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.383] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.383] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.383] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.384] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.384] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.384] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.384] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.385] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.385] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.385] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.385] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.386] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.386] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.386] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.386] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.387] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x569, lpOverlapped=0x0) returned 1 [0233.387] ReadFile (in: hFile=0x228, lpBuffer=0x26fe291, nNumberOfBytesToRead=0x297, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe291*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0233.387] ReadFile (in: hFile=0x228, lpBuffer=0x26fe540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26fe540*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0233.387] CloseHandle (hObject=0x228) returned 1 [0233.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt", lpFilePart=0x0) returned 0x50 [0233.387] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\lGqtUeTK.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\lgqtuetk.ppt")) returned 1 [0233.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls.EnyBenied", lpFilePart=0x0) returned 0x63 [0233.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0233.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\vkhsmxtpxx32cqs93.xls.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0233.392] GetFileType (hFile=0x238) returned 0x1 [0233.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0233.392] GetFileType (hFile=0x238) returned 0x1 [0233.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls", lpFilePart=0x0) returned 0x59 [0233.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0233.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\vkhsmxtpxx32cqs93.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0233.957] GetFileType (hFile=0x228) returned 0x1 [0233.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0233.957] GetFileType (hFile=0x228) returned 0x1 [0233.957] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.965] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.965] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.965] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.966] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.966] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.967] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.967] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0233.967] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x39, lpOverlapped=0x0) returned 1 [0233.967] ReadFile (in: hFile=0x228, lpBuffer=0x26574e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x26574e0*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0233.967] CloseHandle (hObject=0x228) returned 1 [0233.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls", lpFilePart=0x0) returned 0x59 [0233.968] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\vkhsMXTPxX32CQs93.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\vkhsmxtpxx32cqs93.xls")) returned 1 [0233.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4f [0233.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0233.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0233.973] GetFileType (hFile=0x238) returned 0x1 [0233.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0233.974] GetFileType (hFile=0x238) returned 0x1 [0233.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\ENYBENY.png", lpFilePart=0x0) returned 0x4f [0233.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0233.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0233.975] GetFileType (hFile=0x238) returned 0x1 [0233.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0233.975] GetFileType (hFile=0x238) returned 0x1 [0233.975] WriteFile (in: hFile=0x238, lpBuffer=0x266ae80*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x266ae80*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0233.977] CloseHandle (hObject=0x238) returned 1 [0233.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7a [0233.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0233.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\oduUds\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\oduuds\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0233.978] GetFileType (hFile=0x238) returned 0x1 [0233.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0233.978] GetFileType (hFile=0x238) returned 0x1 [0233.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ENYBENY.TXT", lpFilePart=0x0) returned 0x48 [0233.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0233.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0233.979] GetFileType (hFile=0x238) returned 0x1 [0233.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0233.979] GetFileType (hFile=0x238) returned 0x1 [0233.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ENYBENY.png", lpFilePart=0x0) returned 0x48 [0233.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0233.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0233.981] GetFileType (hFile=0x238) returned 0x1 [0233.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0233.981] GetFileType (hFile=0x238) returned 0x1 [0233.981] WriteFile (in: hFile=0x238, lpBuffer=0x267d010*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x267d010*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0233.982] CloseHandle (hObject=0x238) returned 1 [0233.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x73 [0233.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0233.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gpT4BuQCHW_Eknp0BqSC\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gpt4buqchw_eknp0bqsc\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0233.983] GetFileType (hFile=0x238) returned 0x1 [0233.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0233.983] GetFileType (hFile=0x238) returned 0x1 [0233.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0233.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0233.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31 [0233.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0xffffffffffffffff [0233.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0233.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3c [0233.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0233.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0233.992] GetFileType (hFile=0x238) returned 0x1 [0233.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0233.993] GetFileType (hFile=0x238) returned 0x1 [0233.993] WriteFile (in: hFile=0x238, lpBuffer=0x268f470*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x268f470*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0233.994] CloseHandle (hObject=0x238) returned 1 [0233.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\ENYBENY.png", lpFilePart=0x0) returned 0x3c [0233.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0233.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0233.995] GetFileType (hFile=0x238) returned 0x1 [0233.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0233.995] GetFileType (hFile=0x238) returned 0x1 [0233.995] WriteFile (in: hFile=0x238, lpBuffer=0x2690520*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x2690520*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0233.996] CloseHandle (hObject=0x238) returned 1 [0233.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x67 [0233.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0233.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0233.997] GetFileType (hFile=0x238) returned 0x1 [0233.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0233.997] GetFileType (hFile=0x238) returned 0x1 [0233.997] WriteFile (in: hFile=0x238, lpBuffer=0x2697140*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x2697140*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0233.998] CloseHandle (hObject=0x238) returned 1 [0233.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0233.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0233.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34 [0233.999] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0xffffffffffffffff [0233.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0234.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3f [0234.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.005] GetFileType (hFile=0x238) returned 0x1 [0234.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.005] GetFileType (hFile=0x238) returned 0x1 [0234.005] WriteFile (in: hFile=0x238, lpBuffer=0x26a2970*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26a2970*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0234.006] CloseHandle (hObject=0x238) returned 1 [0234.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\ENYBENY.png", lpFilePart=0x0) returned 0x3f [0234.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0234.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.008] GetFileType (hFile=0x238) returned 0x1 [0234.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0234.008] GetFileType (hFile=0x238) returned 0x1 [0234.008] WriteFile (in: hFile=0x238, lpBuffer=0x26a3a20*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26a3a20*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0234.009] CloseHandle (hObject=0x238) returned 1 [0234.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6a [0234.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.010] GetFileType (hFile=0x238) returned 0x1 [0234.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.010] GetFileType (hFile=0x238) returned 0x1 [0234.010] WriteFile (in: hFile=0x238, lpBuffer=0x26aa650*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26aa650*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0234.011] CloseHandle (hObject=0x238) returned 1 [0234.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0234.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0234.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.012] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.012] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.012] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.012] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.013] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.013] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0234.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0234.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.013] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.014] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.014] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.014] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.014] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.014] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0234.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0234.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0234.015] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0234.016] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0234.016] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0234.017] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0234.017] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0234.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0234.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0234.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0234.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0234.017] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0234.018] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0234.018] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0234.018] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0234.018] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0234.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0234.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\ENYBENY.TXT", lpFilePart=0x0) returned 0x46 [0234.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0234.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.020] GetFileType (hFile=0x238) returned 0x1 [0234.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0234.021] GetFileType (hFile=0x238) returned 0x1 [0234.021] WriteFile (in: hFile=0x238, lpBuffer=0x26b9528*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26b9528*, lpNumberOfBytesWritten=0x1adb98*=0x394, lpOverlapped=0x0) returned 1 [0234.022] CloseHandle (hObject=0x238) returned 1 [0234.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\ENYBENY.png", lpFilePart=0x0) returned 0x46 [0234.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0234.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.023] GetFileType (hFile=0x238) returned 0x1 [0234.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0234.023] GetFileType (hFile=0x238) returned 0x1 [0234.023] WriteFile (in: hFile=0x238, lpBuffer=0x26ba5e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x26ba5e8*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0234.025] CloseHandle (hObject=0x238) returned 1 [0234.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x71 [0234.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0234.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.026] GetFileType (hFile=0x238) returned 0x1 [0234.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0234.026] GetFileType (hFile=0x238) returned 0x1 [0234.026] WriteFile (in: hFile=0x238, lpBuffer=0x26c1248*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adb98, lpOverlapped=0x0 | out: lpBuffer=0x26c1248*, lpNumberOfBytesWritten=0x1adb98*=0xc6, lpOverlapped=0x0) returned 1 [0234.027] CloseHandle (hObject=0x238) returned 1 [0234.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3d [0234.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.029] GetFileType (hFile=0x238) returned 0x1 [0234.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.029] GetFileType (hFile=0x238) returned 0x1 [0234.029] WriteFile (in: hFile=0x238, lpBuffer=0x26cb650*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26cb650*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0234.030] CloseHandle (hObject=0x238) returned 1 [0234.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\ENYBENY.png", lpFilePart=0x0) returned 0x3d [0234.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0234.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.034] GetFileType (hFile=0x238) returned 0x1 [0234.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0234.034] GetFileType (hFile=0x238) returned 0x1 [0234.034] WriteFile (in: hFile=0x238, lpBuffer=0x26cc700*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26cc700*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0234.035] CloseHandle (hObject=0x238) returned 1 [0234.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x68 [0234.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.037] GetFileType (hFile=0x238) returned 0x1 [0234.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.037] GetFileType (hFile=0x238) returned 0x1 [0234.037] WriteFile (in: hFile=0x238, lpBuffer=0x26d3330*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26d3330*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0234.038] CloseHandle (hObject=0x238) returned 1 [0234.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0234.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32 [0234.039] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0xffffffffffffffff [0234.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc60) returned 1 [0234.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3d [0234.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.046] GetFileType (hFile=0x238) returned 0x1 [0234.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.046] GetFileType (hFile=0x238) returned 0x1 [0234.046] WriteFile (in: hFile=0x238, lpBuffer=0x26deb28*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26deb28*, lpNumberOfBytesWritten=0x1adc18*=0x394, lpOverlapped=0x0) returned 1 [0234.048] CloseHandle (hObject=0x238) returned 1 [0234.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\ENYBENY.png", lpFilePart=0x0) returned 0x3d [0234.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0234.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.048] GetFileType (hFile=0x238) returned 0x1 [0234.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0234.048] GetFileType (hFile=0x238) returned 0x1 [0234.049] WriteFile (in: hFile=0x238, lpBuffer=0x26dfbd8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26dfbd8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0234.049] CloseHandle (hObject=0x238) returned 1 [0234.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x68 [0234.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.062] GetFileType (hFile=0x238) returned 0x1 [0234.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.062] GetFileType (hFile=0x238) returned 0x1 [0234.062] WriteFile (in: hFile=0x238, lpBuffer=0x26e6808*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc18, lpOverlapped=0x0 | out: lpBuffer=0x26e6808*, lpNumberOfBytesWritten=0x1adc18*=0xc6, lpOverlapped=0x0) returned 1 [0234.063] CloseHandle (hObject=0x238) returned 1 [0234.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0234.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0234.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.064] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.064] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.065] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.065] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0234.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0234.065] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.066] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.066] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.066] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.066] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.EnyBenied", lpFilePart=0x0) returned 0x56 [0234.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0234.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.069] GetFileType (hFile=0x238) returned 0x1 [0234.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0234.069] GetFileType (hFile=0x238) returned 0x1 [0234.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0234.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0234.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0234.616] GetFileType (hFile=0x228) returned 0x1 [0234.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0234.616] GetFileType (hFile=0x228) returned 0x1 [0234.616] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.624] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.625] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.626] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.626] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.626] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.626] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.627] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.627] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.627] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.627] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.628] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.628] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.628] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.628] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.630] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.630] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.631] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.631] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.631] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.631] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.631] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.632] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.632] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.632] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.632] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.633] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.633] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.633] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.633] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.634] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.634] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.634] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.635] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.635] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.635] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.635] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.635] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.636] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.636] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.636] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.636] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.637] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.637] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.637] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.637] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.638] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.638] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.638] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.639] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.639] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.639] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.639] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.639] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.640] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.640] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.640] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.640] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.641] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.641] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.641] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.641] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.642] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.642] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.642] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.643] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0234.643] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x400, lpOverlapped=0x0) returned 1 [0234.643] ReadFile (in: hFile=0x228, lpBuffer=0x2630408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2630408*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0234.643] CloseHandle (hObject=0x228) returned 1 [0234.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0234.644] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst")) returned 1 [0234.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\ENYBENY.TXT", lpFilePart=0x0) returned 0x41 [0234.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.649] GetFileType (hFile=0x238) returned 0x1 [0234.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.649] GetFileType (hFile=0x238) returned 0x1 [0234.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\ENYBENY.png", lpFilePart=0x0) returned 0x41 [0234.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0234.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.651] GetFileType (hFile=0x238) returned 0x1 [0234.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0234.651] GetFileType (hFile=0x238) returned 0x1 [0234.651] WriteFile (in: hFile=0x238, lpBuffer=0x267f6e0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x267f6e0*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0234.652] CloseHandle (hObject=0x238) returned 1 [0234.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6c [0234.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.656] GetFileType (hFile=0x238) returned 0x1 [0234.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.656] GetFileType (hFile=0x238) returned 0x1 [0234.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ENYBENY.TXT", lpFilePart=0x0) returned 0x33 [0234.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0234.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.657] GetFileType (hFile=0x238) returned 0x1 [0234.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0234.658] GetFileType (hFile=0x238) returned 0x1 [0234.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ENYBENY.png", lpFilePart=0x0) returned 0x33 [0234.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0234.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.659] GetFileType (hFile=0x238) returned 0x1 [0234.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0234.659] GetFileType (hFile=0x238) returned 0x1 [0234.659] WriteFile (in: hFile=0x238, lpBuffer=0x2691798*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2691798*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0234.660] CloseHandle (hObject=0x238) returned 1 [0234.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5e [0234.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0234.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.663] GetFileType (hFile=0x238) returned 0x1 [0234.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0234.664] GetFileType (hFile=0x238) returned 0x1 [0234.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0234.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0234.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0234.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0234.665] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.665] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.665] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0234.666] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0234.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0234.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0234.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0234.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0234.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0234.666] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.667] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.667] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0234.667] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0234.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0234.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\ENYBENY.TXT", lpFilePart=0x0) returned 0x33 [0234.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0234.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.671] GetFileType (hFile=0x238) returned 0x1 [0234.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0234.671] GetFileType (hFile=0x238) returned 0x1 [0234.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\ENYBENY.png", lpFilePart=0x0) returned 0x33 [0234.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0234.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.673] GetFileType (hFile=0x238) returned 0x1 [0234.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0234.673] GetFileType (hFile=0x238) returned 0x1 [0234.673] WriteFile (in: hFile=0x238, lpBuffer=0x26a5618*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26a5618*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0234.674] CloseHandle (hObject=0x238) returned 1 [0234.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5e [0234.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0234.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.676] GetFileType (hFile=0x238) returned 0x1 [0234.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0234.676] GetFileType (hFile=0x238) returned 0x1 [0234.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0234.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0234.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0234.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0234.678] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.679] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.679] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0234.679] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0234.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0234.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0234.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0234.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0234.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0234.679] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.680] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.680] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.680] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.680] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.680] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.680] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0234.680] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0234.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0234.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0234.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e [0234.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.681] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.681] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.681] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.682] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.682] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.682] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0234.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e [0234.682] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.682] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.683] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.683] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.683] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.683] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.683] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\ENYBENY.TXT", lpFilePart=0x0) returned 0x39 [0234.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.685] GetFileType (hFile=0x238) returned 0x1 [0234.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.685] GetFileType (hFile=0x238) returned 0x1 [0234.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\ENYBENY.png", lpFilePart=0x0) returned 0x39 [0234.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0234.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.688] GetFileType (hFile=0x238) returned 0x1 [0234.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0234.688] GetFileType (hFile=0x238) returned 0x1 [0234.688] WriteFile (in: hFile=0x238, lpBuffer=0x26bcb60*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26bcb60*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0234.689] CloseHandle (hObject=0x238) returned 1 [0234.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x64 [0234.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.690] GetFileType (hFile=0x238) returned 0x1 [0234.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.690] GetFileType (hFile=0x238) returned 0x1 [0234.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0234.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b [0234.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.699] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.699] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.699] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.699] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.699] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.700] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.700] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.700] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0234.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b [0234.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.703] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\ENYBENY.TXT", lpFilePart=0x0) returned 0x46 [0234.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.705] GetFileType (hFile=0x238) returned 0x1 [0234.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.705] GetFileType (hFile=0x238) returned 0x1 [0234.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\ENYBENY.png", lpFilePart=0x0) returned 0x46 [0234.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0234.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.707] GetFileType (hFile=0x238) returned 0x1 [0234.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0234.707] GetFileType (hFile=0x238) returned 0x1 [0234.707] WriteFile (in: hFile=0x238, lpBuffer=0x26d23d8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26d23d8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0234.708] CloseHandle (hObject=0x238) returned 1 [0234.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x71 [0234.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.709] GetFileType (hFile=0x238) returned 0x1 [0234.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.709] GetFileType (hFile=0x238) returned 0x1 [0234.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0234.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35 [0234.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.712] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.712] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.712] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.712] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.713] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.713] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.713] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.713] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.713] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0234.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0234.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35 [0234.714] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0234.715] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.715] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.715] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.715] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.716] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.716] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.716] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0234.716] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0234.716] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0234.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0234.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\ENYBENY.TXT", lpFilePart=0x0) returned 0x40 [0234.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\ENYBENY.png", lpFilePart=0x0) returned 0x40 [0234.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0234.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0234.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6b [0234.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0234.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0234.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\ENYBENY.TXT", lpFilePart=0x0) returned 0x33 [0234.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0234.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0234.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\ENYBENY.png", lpFilePart=0x0) returned 0x33 [0234.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0234.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0234.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5e [0234.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0234.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0234.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0234.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0234.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0234.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", lpFilePart=0x0) returned 0x24 [0234.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0234.730] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.730] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.730] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.730] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.730] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.730] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0234.730] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0234.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0234.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0234.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0234.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", lpFilePart=0x0) returned 0x24 [0234.731] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0234.731] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.731] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.731] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.731] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.732] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0234.732] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0234.732] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0234.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0234.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0234.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.EnyBenied", lpFilePart=0x0) returned 0x39 [0234.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0234.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0234.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0235.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0235.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0235.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0235.200] GetFileType (hFile=0x228) returned 0x1 [0235.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0235.200] GetFileType (hFile=0x228) returned 0x1 [0235.200] ReadFile (in: hFile=0x228, lpBuffer=0x264aa00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264aa00*, lpNumberOfBytesRead=0x1add88*=0x1e6, lpOverlapped=0x0) returned 1 [0235.202] ReadFile (in: hFile=0x228, lpBuffer=0x264aa00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264aa00*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0235.202] CloseHandle (hObject=0x228) returned 1 [0235.202] WriteFile (in: hFile=0x238, lpBuffer=0x2648fc8*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2648fc8*, lpNumberOfBytesWritten=0x1adc58*=0x210, lpOverlapped=0x0) returned 1 [0235.203] CloseHandle (hObject=0x238) returned 1 [0235.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0235.203] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk")) returned 1 [0235.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.EnyBenied", lpFilePart=0x0) returned 0x3b [0235.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0235.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0235.206] GetFileType (hFile=0x238) returned 0x1 [0235.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0235.206] GetFileType (hFile=0x238) returned 0x1 [0235.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0235.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0235.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0235.679] GetFileType (hFile=0x228) returned 0x1 [0235.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0235.679] GetFileType (hFile=0x228) returned 0x1 [0235.679] ReadFile (in: hFile=0x228, lpBuffer=0x2791d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2791d48*, lpNumberOfBytesRead=0x1add88*=0x3a1, lpOverlapped=0x0) returned 1 [0235.686] ReadFile (in: hFile=0x228, lpBuffer=0x2791d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2791d48*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0235.686] CloseHandle (hObject=0x228) returned 1 [0235.686] WriteFile (in: hFile=0x238, lpBuffer=0x2790300*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x2790300*, lpNumberOfBytesWritten=0x1adc58*=0x3d0, lpOverlapped=0x0) returned 1 [0235.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0235.688] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk")) returned 1 [0235.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.EnyBenied", lpFilePart=0x0) returned 0x3e [0235.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0235.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0235.690] GetFileType (hFile=0x238) returned 0x1 [0235.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0235.690] GetFileType (hFile=0x238) returned 0x1 [0236.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0236.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0236.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0236.205] GetFileType (hFile=0x228) returned 0x1 [0236.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0236.205] GetFileType (hFile=0x228) returned 0x1 [0236.205] ReadFile (in: hFile=0x228, lpBuffer=0x26d9300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26d9300*, lpNumberOfBytesRead=0x1add88*=0x16b, lpOverlapped=0x0) returned 1 [0236.207] ReadFile (in: hFile=0x228, lpBuffer=0x26d9300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26d9300*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0236.207] CloseHandle (hObject=0x228) returned 1 [0236.208] WriteFile (in: hFile=0x238, lpBuffer=0x26d78a8*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26d78a8*, lpNumberOfBytesWritten=0x1adc58*=0x190, lpOverlapped=0x0) returned 1 [0236.209] CloseHandle (hObject=0x238) returned 1 [0236.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0236.209] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk")) returned 1 [0236.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0236.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0236.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0236.213] GetFileType (hFile=0x238) returned 0x1 [0236.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0236.214] GetFileType (hFile=0x238) returned 0x1 [0236.214] WriteFile (in: hFile=0x238, lpBuffer=0x26e3938*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26e3938*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0236.215] CloseHandle (hObject=0x238) returned 1 [0236.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0236.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0236.215] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0236.216] GetFileType (hFile=0x238) returned 0x1 [0236.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0236.216] GetFileType (hFile=0x238) returned 0x1 [0236.216] WriteFile (in: hFile=0x238, lpBuffer=0x26e49c8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26e49c8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0236.217] CloseHandle (hObject=0x238) returned 1 [0236.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0236.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0236.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0236.218] GetFileType (hFile=0x238) returned 0x1 [0236.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0236.218] GetFileType (hFile=0x238) returned 0x1 [0236.218] WriteFile (in: hFile=0x238, lpBuffer=0x26eb598*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26eb598*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0236.219] CloseHandle (hObject=0x238) returned 1 [0236.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0236.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0236.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", lpFilePart=0x0) returned 0x2d [0236.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0236.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0236.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\ENYBENY.TXT", lpFilePart=0x0) returned 0x38 [0236.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0236.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0236.225] GetFileType (hFile=0x238) returned 0x1 [0236.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0236.225] GetFileType (hFile=0x238) returned 0x1 [0236.226] WriteFile (in: hFile=0x238, lpBuffer=0x26f6d30*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26f6d30*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0236.227] CloseHandle (hObject=0x238) returned 1 [0236.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\ENYBENY.png", lpFilePart=0x0) returned 0x38 [0236.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0236.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0236.236] GetFileType (hFile=0x238) returned 0x1 [0236.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0236.236] GetFileType (hFile=0x238) returned 0x1 [0236.236] WriteFile (in: hFile=0x238, lpBuffer=0x26f7dd8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26f7dd8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0236.237] CloseHandle (hObject=0x238) returned 1 [0236.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x63 [0236.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0236.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0236.238] GetFileType (hFile=0x238) returned 0x1 [0236.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0236.238] GetFileType (hFile=0x238) returned 0x1 [0236.238] WriteFile (in: hFile=0x238, lpBuffer=0x26fe9e0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26fe9e0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0236.239] CloseHandle (hObject=0x238) returned 1 [0236.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0236.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0236.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0236.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0236.240] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.240] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.240] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.240] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.240] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.241] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.241] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.241] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.241] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.241] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.241] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0236.241] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0236.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0236.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0236.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0236.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0236.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0236.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0236.242] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.242] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.242] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.242] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.242] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.243] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.243] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.243] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.243] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.243] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0236.243] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0236.244] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0236.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0236.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0236.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x39 [0236.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0236.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0236.245] GetFileType (hFile=0x238) returned 0x1 [0236.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0236.245] GetFileType (hFile=0x238) returned 0x1 [0236.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0236.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0236.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0236.769] GetFileType (hFile=0x228) returned 0x1 [0236.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0236.770] GetFileType (hFile=0x228) returned 0x1 [0236.770] ReadFile (in: hFile=0x228, lpBuffer=0x264a088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264a088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0236.772] ReadFile (in: hFile=0x228, lpBuffer=0x264a088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264a088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0236.776] ReadFile (in: hFile=0x228, lpBuffer=0x264a088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264a088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0236.776] ReadFile (in: hFile=0x228, lpBuffer=0x264a088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264a088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0236.777] ReadFile (in: hFile=0x228, lpBuffer=0x264a088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264a088*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0236.777] ReadFile (in: hFile=0x228, lpBuffer=0x264a088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264a088*, lpNumberOfBytesRead=0x1add88*=0xdf, lpOverlapped=0x0) returned 1 [0236.777] ReadFile (in: hFile=0x228, lpBuffer=0x264a088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264a088*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0236.777] CloseHandle (hObject=0x228) returned 1 [0236.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0236.778] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\enybeny.png")) returned 1 [0236.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a.EnyBenied", lpFilePart=0x0) returned 0x42 [0236.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0236.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\h3l3lxyofivkthdv.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0236.781] GetFileType (hFile=0x238) returned 0x1 [0236.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0236.781] GetFileType (hFile=0x238) returned 0x1 [0237.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a", lpFilePart=0x0) returned 0x38 [0237.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0237.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\h3l3lxyofivkthdv.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0237.307] GetFileType (hFile=0x228) returned 0x1 [0237.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0237.307] GetFileType (hFile=0x228) returned 0x1 [0237.307] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.313] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.314] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.314] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.314] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.315] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.315] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.315] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.315] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.316] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.316] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.316] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.316] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.317] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.317] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.317] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.317] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.318] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.318] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.318] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.319] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.319] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.319] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x952, lpOverlapped=0x0) returned 1 [0237.319] ReadFile (in: hFile=0x228, lpBuffer=0x279627a, nNumberOfBytesToRead=0x2ae, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x279627a*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0237.319] ReadFile (in: hFile=0x228, lpBuffer=0x2796540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2796540*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0237.319] CloseHandle (hObject=0x228) returned 1 [0237.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a", lpFilePart=0x0) returned 0x38 [0237.320] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H3l3lxYofivKtHdv.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\h3l3lxyofivkthdv.m4a")) returned 1 [0237.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a.EnyBenied", lpFilePart=0x0) returned 0x38 [0237.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0237.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u9idgl.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0237.323] GetFileType (hFile=0x238) returned 0x1 [0237.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0237.323] GetFileType (hFile=0x238) returned 0x1 [0237.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a", lpFilePart=0x0) returned 0x2e [0237.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0237.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u9idgl.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0237.773] GetFileType (hFile=0x228) returned 0x1 [0237.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0237.773] GetFileType (hFile=0x228) returned 0x1 [0237.773] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.779] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.779] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.779] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.779] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.780] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.780] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.780] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.780] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.780] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.781] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.781] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.781] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.781] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.781] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.782] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.782] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.782] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.782] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.782] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.783] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.783] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.783] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0237.783] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x8b0, lpOverlapped=0x0) returned 1 [0237.783] ReadFile (in: hFile=0x228, lpBuffer=0x26f45d8, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f45d8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0237.783] ReadFile (in: hFile=0x228, lpBuffer=0x26f4940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4940*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0237.784] CloseHandle (hObject=0x228) returned 1 [0237.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a", lpFilePart=0x0) returned 0x2e [0237.784] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u9iDGL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u9idgl.m4a")) returned 1 [0237.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0237.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l", lpFilePart=0x0) returned 0x28 [0237.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\", lpFilePart=0x0) returned 0x29 [0237.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0237.786] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.786] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.786] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.786] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.786] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.786] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0237.786] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0237.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0237.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0237.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0237.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l", lpFilePart=0x0) returned 0x28 [0237.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\", lpFilePart=0x0) returned 0x29 [0237.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0237.787] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.787] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.787] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.787] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.787] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0237.788] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0237.788] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0237.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0237.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0237.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a.EnyBenied", lpFilePart=0x0) returned 0x42 [0237.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0237.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\dfczfvvbloz.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0237.790] GetFileType (hFile=0x238) returned 0x1 [0237.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0237.790] GetFileType (hFile=0x238) returned 0x1 [0238.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a", lpFilePart=0x0) returned 0x38 [0238.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0238.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\dfczfvvbloz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0238.225] GetFileType (hFile=0x228) returned 0x1 [0238.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0238.225] GetFileType (hFile=0x228) returned 0x1 [0238.225] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.232] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.232] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.232] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.233] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.233] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.233] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.234] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.234] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.234] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.234] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.235] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.235] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.235] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.236] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.236] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.236] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.236] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.237] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.237] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.237] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.237] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0xd14, lpOverlapped=0x0) returned 1 [0238.237] ReadFile (in: hFile=0x228, lpBuffer=0x2656d34, nNumberOfBytesToRead=0x2ec, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2656d34*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0238.237] ReadFile (in: hFile=0x228, lpBuffer=0x2657038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2657038*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0238.238] CloseHandle (hObject=0x228) returned 1 [0238.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a", lpFilePart=0x0) returned 0x38 [0238.238] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\dFCzFvvbLoz.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\dfczfvvbloz.m4a")) returned 1 [0238.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a.EnyBenied", lpFilePart=0x0) returned 0x49 [0238.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0238.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\e1e8asgsdoey00xsls.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0238.241] GetFileType (hFile=0x238) returned 0x1 [0238.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0238.241] GetFileType (hFile=0x238) returned 0x1 [0238.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a", lpFilePart=0x0) returned 0x3f [0238.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0238.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\e1e8asgsdoey00xsls.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0238.730] GetFileType (hFile=0x228) returned 0x1 [0238.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0238.730] GetFileType (hFile=0x228) returned 0x1 [0238.730] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.736] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.736] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.737] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.737] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.737] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.738] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.738] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.738] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.739] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.739] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.739] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.739] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0238.740] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x23e, lpOverlapped=0x0) returned 1 [0238.740] ReadFile (in: hFile=0x228, lpBuffer=0x27b43c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27b43c8*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0238.740] CloseHandle (hObject=0x228) returned 1 [0238.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a", lpFilePart=0x0) returned 0x3f [0238.740] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\e1E8aSgSdoey00XSLs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\e1e8asgsdoey00xsls.m4a")) returned 1 [0238.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0238.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG", lpFilePart=0x0) returned 0x3a [0238.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\", lpFilePart=0x0) returned 0x3b [0238.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0238.742] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0238.742] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0238.742] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0238.743] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0238.743] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0238.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0238.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0238.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0238.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG", lpFilePart=0x0) returned 0x3a [0238.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\", lpFilePart=0x0) returned 0x3b [0238.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0238.743] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0238.743] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0238.744] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0238.744] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0238.744] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0238.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0238.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0238.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a.EnyBenied", lpFilePart=0x0) returned 0x53 [0238.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0238.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\3wswki2yt7rq661jg\\qk9 wvv36o.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0238.747] GetFileType (hFile=0x238) returned 0x1 [0238.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0238.747] GetFileType (hFile=0x238) returned 0x1 [0239.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a", lpFilePart=0x0) returned 0x49 [0239.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0239.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\3wswki2yt7rq661jg\\qk9 wvv36o.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0239.150] GetFileType (hFile=0x228) returned 0x1 [0239.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.150] GetFileType (hFile=0x228) returned 0x1 [0239.150] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.152] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.156] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.156] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.156] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.156] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.156] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.157] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.157] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.157] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.157] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x5d2, lpOverlapped=0x0) returned 1 [0239.157] ReadFile (in: hFile=0x228, lpBuffer=0x270b522, nNumberOfBytesToRead=0x22e, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b522*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0239.157] ReadFile (in: hFile=0x228, lpBuffer=0x270b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270b768*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0239.157] CloseHandle (hObject=0x228) returned 1 [0239.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a", lpFilePart=0x0) returned 0x49 [0239.158] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\Qk9 WVv36O.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\3wswki2yt7rq661jg\\qk9 wvv36o.m4a")) returned 1 [0239.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\ENYBENY.TXT", lpFilePart=0x0) returned 0x46 [0239.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0239.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\3wswki2yt7rq661jg\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.162] GetFileType (hFile=0x238) returned 0x1 [0239.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0239.162] GetFileType (hFile=0x238) returned 0x1 [0239.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\ENYBENY.png", lpFilePart=0x0) returned 0x46 [0239.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\3wswki2yt7rq661jg\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.164] GetFileType (hFile=0x238) returned 0x1 [0239.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0239.164] GetFileType (hFile=0x238) returned 0x1 [0239.164] WriteFile (in: hFile=0x238, lpBuffer=0x2721738*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x2721738*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.165] CloseHandle (hObject=0x238) returned 1 [0239.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x71 [0239.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0239.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\3wsWki2Yt7Rq661JG\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\3wswki2yt7rq661jg\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.166] GetFileType (hFile=0x238) returned 0x1 [0239.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0239.166] GetFileType (hFile=0x238) returned 0x1 [0239.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0239.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G", lpFilePart=0x0) returned 0x2d [0239.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\", lpFilePart=0x0) returned 0x2e [0239.167] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0239.167] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.167] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.167] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.168] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.168] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.168] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.168] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0239.168] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0239.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0239.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0239.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G", lpFilePart=0x0) returned 0x2d [0239.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\", lpFilePart=0x0) returned 0x2e [0239.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0239.168] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.169] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.169] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.169] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.169] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.169] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0239.169] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0239.169] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0239.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0239.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a.EnyBenied", lpFilePart=0x0) returned 0x4b [0239.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0239.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\v1kfch1bfycaheq.m4a.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.171] GetFileType (hFile=0x238) returned 0x1 [0239.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.171] GetFileType (hFile=0x238) returned 0x1 [0239.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a", lpFilePart=0x0) returned 0x41 [0239.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0239.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\v1kfch1bfycaheq.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0239.657] GetFileType (hFile=0x228) returned 0x1 [0239.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.657] GetFileType (hFile=0x228) returned 0x1 [0239.657] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.665] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.665] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.665] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.666] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.666] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.666] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.666] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.667] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.667] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.667] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0239.668] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x3d2, lpOverlapped=0x0) returned 1 [0239.668] ReadFile (in: hFile=0x228, lpBuffer=0x2670b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2670b98*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0239.668] CloseHandle (hObject=0x228) returned 1 [0239.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a", lpFilePart=0x0) returned 0x41 [0239.668] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\V1KFch1BFYcAHEq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\v1kfch1bfycaheq.m4a")) returned 1 [0239.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0239.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x", lpFilePart=0x0) returned 0x37 [0239.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\", lpFilePart=0x0) returned 0x38 [0239.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0239.670] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.670] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.670] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.671] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.671] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.671] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.671] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.671] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.671] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.672] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.672] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.672] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0239.672] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0239.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0239.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0239.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x", lpFilePart=0x0) returned 0x37 [0239.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\", lpFilePart=0x0) returned 0x38 [0239.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0239.673] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.673] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.673] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.673] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.673] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.674] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.674] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.674] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.674] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.674] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.674] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0239.675] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0239.675] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0239.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0239.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH", lpFilePart=0x0) returned 0x49 [0239.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\", lpFilePart=0x0) returned 0x4a [0239.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.675] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.675] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.676] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.676] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH", lpFilePart=0x0) returned 0x49 [0239.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\", lpFilePart=0x0) returned 0x4a [0239.676] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.676] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.677] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.677] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.677] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\ENYBENY.TXT", lpFilePart=0x0) returned 0x55 [0239.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\7fssainie5ow1v3yh\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.681] GetFileType (hFile=0x238) returned 0x1 [0239.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.681] GetFileType (hFile=0x238) returned 0x1 [0239.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\ENYBENY.png", lpFilePart=0x0) returned 0x55 [0239.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0239.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\7fssainie5ow1v3yh\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.683] GetFileType (hFile=0x238) returned 0x1 [0239.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0239.683] GetFileType (hFile=0x238) returned 0x1 [0239.683] WriteFile (in: hFile=0x238, lpBuffer=0x268e9d0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x268e9d0*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.685] CloseHandle (hObject=0x238) returned 1 [0239.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x80 [0239.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\7FssAinIe5OW1V3YH\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\7fssainie5ow1v3yh\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.688] GetFileType (hFile=0x238) returned 0x1 [0239.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.688] GetFileType (hFile=0x238) returned 0x1 [0239.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr", lpFilePart=0x0) returned 0x46 [0239.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\", lpFilePart=0x0) returned 0x47 [0239.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.691] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.692] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.692] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr", lpFilePart=0x0) returned 0x46 [0239.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\", lpFilePart=0x0) returned 0x47 [0239.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.692] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.693] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.693] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x52 [0239.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\eekl3 6vp1izcr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.695] GetFileType (hFile=0x238) returned 0x1 [0239.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.696] GetFileType (hFile=0x238) returned 0x1 [0239.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\ENYBENY.png", lpFilePart=0x0) returned 0x52 [0239.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0239.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\eekl3 6vp1izcr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.697] GetFileType (hFile=0x238) returned 0x1 [0239.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0239.698] GetFileType (hFile=0x238) returned 0x1 [0239.698] WriteFile (in: hFile=0x238, lpBuffer=0x26a2cf0*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26a2cf0*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.699] CloseHandle (hObject=0x238) returned 1 [0239.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7d [0239.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.699] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\EEKl3 6vp1IZcr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\eekl3 6vp1izcr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.700] GetFileType (hFile=0x238) returned 0x1 [0239.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.700] GetFileType (hFile=0x238) returned 0x1 [0239.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O", lpFilePart=0x0) returned 0x3c [0239.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\", lpFilePart=0x0) returned 0x3d [0239.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.701] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.702] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.702] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O", lpFilePart=0x0) returned 0x3c [0239.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\", lpFilePart=0x0) returned 0x3d [0239.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.703] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.703] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.703] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.703] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.703] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.704] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\ENYBENY.TXT", lpFilePart=0x0) returned 0x48 [0239.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\es5o\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.705] GetFileType (hFile=0x238) returned 0x1 [0239.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.705] GetFileType (hFile=0x238) returned 0x1 [0239.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\ENYBENY.png", lpFilePart=0x0) returned 0x48 [0239.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0239.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\es5o\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.706] GetFileType (hFile=0x238) returned 0x1 [0239.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0239.707] GetFileType (hFile=0x238) returned 0x1 [0239.707] WriteFile (in: hFile=0x238, lpBuffer=0x26b7c40*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26b7c40*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.708] CloseHandle (hObject=0x238) returned 1 [0239.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x73 [0239.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ES5O\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\es5o\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.709] GetFileType (hFile=0x238) returned 0x1 [0239.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.709] GetFileType (hFile=0x238) returned 0x1 [0239.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr", lpFilePart=0x0) returned 0x44 [0239.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\", lpFilePart=0x0) returned 0x45 [0239.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.711] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.711] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.711] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.711] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.711] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.711] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr", lpFilePart=0x0) returned 0x44 [0239.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\", lpFilePart=0x0) returned 0x45 [0239.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.712] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.712] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.712] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.712] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.713] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.713] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\ENYBENY.TXT", lpFilePart=0x0) returned 0x50 [0239.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\lm3ilhzps1dr\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.714] GetFileType (hFile=0x238) returned 0x1 [0239.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.714] GetFileType (hFile=0x238) returned 0x1 [0239.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\ENYBENY.png", lpFilePart=0x0) returned 0x50 [0239.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0239.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\lm3ilhzps1dr\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.716] GetFileType (hFile=0x238) returned 0x1 [0239.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0239.716] GetFileType (hFile=0x238) returned 0x1 [0239.716] WriteFile (in: hFile=0x238, lpBuffer=0x26cce60*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26cce60*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.717] CloseHandle (hObject=0x238) returned 1 [0239.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x7b [0239.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\LM3iLhzpS1dr\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\lm3ilhzps1dr\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.718] GetFileType (hFile=0x238) returned 0x1 [0239.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.718] GetFileType (hFile=0x238) returned 0x1 [0239.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF", lpFilePart=0x0) returned 0x40 [0239.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\", lpFilePart=0x0) returned 0x41 [0239.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.719] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.719] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.720] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.720] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.720] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF", lpFilePart=0x0) returned 0x40 [0239.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\", lpFilePart=0x0) returned 0x41 [0239.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0239.720] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.721] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.721] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0239.721] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0239.721] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0239.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0239.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\ENYBENY.TXT", lpFilePart=0x0) returned 0x4c [0239.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\tdj8jezf\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.722] GetFileType (hFile=0x238) returned 0x1 [0239.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.722] GetFileType (hFile=0x238) returned 0x1 [0239.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\ENYBENY.png", lpFilePart=0x0) returned 0x4c [0239.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0239.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\tdj8jezf\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.724] GetFileType (hFile=0x238) returned 0x1 [0239.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0239.725] GetFileType (hFile=0x238) returned 0x1 [0239.725] WriteFile (in: hFile=0x238, lpBuffer=0x26e1818*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x26e1818*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.726] CloseHandle (hObject=0x238) returned 1 [0239.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x77 [0239.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0239.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\tDJ8jEzF\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\tdj8jezf\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.740] GetFileType (hFile=0x238) returned 0x1 [0239.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0239.740] GetFileType (hFile=0x238) returned 0x1 [0239.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ENYBENY.TXT", lpFilePart=0x0) returned 0x43 [0239.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0239.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.745] GetFileType (hFile=0x238) returned 0x1 [0239.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0239.745] GetFileType (hFile=0x238) returned 0x1 [0239.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ENYBENY.png", lpFilePart=0x0) returned 0x43 [0239.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0239.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.747] GetFileType (hFile=0x238) returned 0x1 [0239.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0239.748] GetFileType (hFile=0x238) returned 0x1 [0239.748] WriteFile (in: hFile=0x238, lpBuffer=0x26f3968*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26f3968*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0239.749] CloseHandle (hObject=0x238) returned 1 [0239.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6e [0239.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0239.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\heKuEHn x\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\hekuehn x\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.750] GetFileType (hFile=0x238) returned 0x1 [0239.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0239.750] GetFileType (hFile=0x238) returned 0x1 [0239.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\ENYBENY.TXT", lpFilePart=0x0) returned 0x39 [0239.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0239.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.752] GetFileType (hFile=0x238) returned 0x1 [0239.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0239.752] GetFileType (hFile=0x238) returned 0x1 [0239.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\ENYBENY.png", lpFilePart=0x0) returned 0x39 [0239.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0239.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.754] GetFileType (hFile=0x238) returned 0x1 [0239.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0239.754] GetFileType (hFile=0x238) returned 0x1 [0239.754] WriteFile (in: hFile=0x238, lpBuffer=0x2705a50*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x2705a50*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.755] CloseHandle (hObject=0x238) returned 1 [0239.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x64 [0239.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0239.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\_R6G\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\_r6g\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0239.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\ENYBENY.TXT", lpFilePart=0x0) returned 0x34 [0239.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0239.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0239.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\ENYBENY.png", lpFilePart=0x0) returned 0x34 [0239.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0239.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0239.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5f [0239.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0239.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y7l\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y7l\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0239.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0239.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0239.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0239.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0239.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0239.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0239.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0239.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0239.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0239.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0239.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0239.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", lpFilePart=0x0) returned 0x2b [0239.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0239.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0239.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\ENYBENY.TXT", lpFilePart=0x0) returned 0x36 [0239.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0239.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.775] GetFileType (hFile=0x238) returned 0x1 [0239.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0239.775] GetFileType (hFile=0x238) returned 0x1 [0239.776] WriteFile (in: hFile=0x238, lpBuffer=0x273be68*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x273be68*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0239.777] CloseHandle (hObject=0x238) returned 1 [0239.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\ENYBENY.png", lpFilePart=0x0) returned 0x36 [0239.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0239.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.778] GetFileType (hFile=0x238) returned 0x1 [0239.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0239.778] GetFileType (hFile=0x238) returned 0x1 [0239.778] WriteFile (in: hFile=0x238, lpBuffer=0x273cf08*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x273cf08*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.779] CloseHandle (hObject=0x238) returned 1 [0239.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x61 [0239.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0239.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.780] GetFileType (hFile=0x238) returned 0x1 [0239.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0239.780] GetFileType (hFile=0x238) returned 0x1 [0239.780] WriteFile (in: hFile=0x238, lpBuffer=0x2743b08*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2743b08*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0239.781] CloseHandle (hObject=0x238) returned 1 [0239.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0239.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0239.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", lpFilePart=0x0) returned 0x26 [0239.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0239.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0239.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0239.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0239.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.788] GetFileType (hFile=0x238) returned 0x1 [0239.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0239.788] GetFileType (hFile=0x238) returned 0x1 [0239.789] WriteFile (in: hFile=0x238, lpBuffer=0x274f1e0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x274f1e0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0239.790] CloseHandle (hObject=0x238) returned 1 [0239.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0239.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0239.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.791] GetFileType (hFile=0x238) returned 0x1 [0239.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0239.792] GetFileType (hFile=0x238) returned 0x1 [0239.792] WriteFile (in: hFile=0x238, lpBuffer=0x2750278*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2750278*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0239.793] CloseHandle (hObject=0x238) returned 1 [0239.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0239.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0239.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0239.794] GetFileType (hFile=0x238) returned 0x1 [0239.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0239.794] GetFileType (hFile=0x238) returned 0x1 [0239.795] WriteFile (in: hFile=0x238, lpBuffer=0x2756e60*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2756e60*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0239.796] CloseHandle (hObject=0x238) returned 1 [0239.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0239.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0239.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0239.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0239.796] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.796] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.797] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.797] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.797] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.797] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.797] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.797] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.798] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.798] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.798] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.798] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.798] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.798] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.798] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.798] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.799] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.799] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.799] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.799] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.799] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.799] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.800] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.800] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.800] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.800] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.800] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.800] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.800] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.801] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.801] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.801] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0239.801] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0239.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0239.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0239.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0239.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0239.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0239.802] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.802] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.802] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.802] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.802] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.803] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.803] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.803] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.803] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.804] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.804] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.804] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.804] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.804] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.804] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.804] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.805] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.805] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.805] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.805] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.805] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.805] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.805] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.806] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.806] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.806] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.806] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.806] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.806] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.807] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.807] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0239.807] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0239.807] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0239.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0239.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0239.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png.EnyBenied", lpFilePart=0x0) returned 0x42 [0239.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0239.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0xzvbwrpsq5gv.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0239.809] GetFileType (hFile=0x238) returned 0x1 [0239.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0239.809] GetFileType (hFile=0x238) returned 0x1 [0240.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png", lpFilePart=0x0) returned 0x38 [0240.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0240.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0xzvbwrpsq5gv.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0240.381] GetFileType (hFile=0x228) returned 0x1 [0240.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0240.382] GetFileType (hFile=0x228) returned 0x1 [0240.382] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.388] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.388] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.389] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.389] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.390] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.390] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.390] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.390] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.391] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.391] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.391] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.392] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.392] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.392] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.392] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.393] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.393] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.393] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.394] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.394] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.394] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.395] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.395] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.395] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x498, lpOverlapped=0x0) returned 1 [0240.395] ReadFile (in: hFile=0x228, lpBuffer=0x2685388, nNumberOfBytesToRead=0x368, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685388*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0240.395] ReadFile (in: hFile=0x228, lpBuffer=0x2685708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2685708*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0240.396] CloseHandle (hObject=0x228) returned 1 [0240.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png", lpFilePart=0x0) returned 0x38 [0240.396] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0xZVBWRpsq5gV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0xzvbwrpsq5gv.png")) returned 1 [0240.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg.EnyBenied", lpFilePart=0x0) returned 0x3a [0240.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0240.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\49rwl.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0240.400] GetFileType (hFile=0x238) returned 0x1 [0240.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0240.400] GetFileType (hFile=0x238) returned 0x1 [0240.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg", lpFilePart=0x0) returned 0x30 [0240.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0240.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\49rwl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0240.935] GetFileType (hFile=0x228) returned 0x1 [0240.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0240.935] GetFileType (hFile=0x228) returned 0x1 [0240.935] ReadFile (in: hFile=0x228, lpBuffer=0x27e5660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e5660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0240.942] ReadFile (in: hFile=0x228, lpBuffer=0x27e5660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e5660*, lpNumberOfBytesRead=0x1add88*=0x426, lpOverlapped=0x0) returned 1 [0240.942] ReadFile (in: hFile=0x228, lpBuffer=0x27e526e, nNumberOfBytesToRead=0x3da, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e526e*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0240.942] ReadFile (in: hFile=0x228, lpBuffer=0x27e5660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27e5660*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0240.942] CloseHandle (hObject=0x228) returned 1 [0240.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg", lpFilePart=0x0) returned 0x30 [0240.943] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\49RwL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\49rwl.jpg")) returned 1 [0240.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png.EnyBenied", lpFilePart=0x0) returned 0x3f [0240.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0240.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jkuridciw.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0240.946] GetFileType (hFile=0x238) returned 0x1 [0240.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0240.946] GetFileType (hFile=0x238) returned 0x1 [0241.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png", lpFilePart=0x0) returned 0x35 [0241.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0241.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jkuridciw.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0241.470] GetFileType (hFile=0x228) returned 0x1 [0241.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0241.470] GetFileType (hFile=0x228) returned 0x1 [0241.470] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.477] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.478] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.478] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.478] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.479] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.479] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.479] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.480] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.480] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.480] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.481] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.481] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.481] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.482] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.482] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.482] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.482] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.483] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0241.483] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x29a, lpOverlapped=0x0) returned 1 [0241.483] ReadFile (in: hFile=0x228, lpBuffer=0x272dd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x272dd48*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0241.483] CloseHandle (hObject=0x228) returned 1 [0241.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png", lpFilePart=0x0) returned 0x35 [0241.484] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jKUridCiw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jkuridciw.png")) returned 1 [0241.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png.EnyBenied", lpFilePart=0x0) returned 0x40 [0241.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0241.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c9nth0a64qe.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0241.489] GetFileType (hFile=0x238) returned 0x1 [0241.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0241.489] GetFileType (hFile=0x238) returned 0x1 [0242.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png", lpFilePart=0x0) returned 0x36 [0242.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0242.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c9nth0a64qe.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0242.046] GetFileType (hFile=0x228) returned 0x1 [0242.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0242.046] GetFileType (hFile=0x228) returned 0x1 [0242.046] ReadFile (in: hFile=0x228, lpBuffer=0x2688a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2688a38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.053] ReadFile (in: hFile=0x228, lpBuffer=0x2688a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2688a38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.053] ReadFile (in: hFile=0x228, lpBuffer=0x2688a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2688a38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.054] ReadFile (in: hFile=0x228, lpBuffer=0x2688a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2688a38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.054] ReadFile (in: hFile=0x228, lpBuffer=0x2688a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2688a38*, lpNumberOfBytesRead=0x1add88*=0x71d, lpOverlapped=0x0) returned 1 [0242.054] ReadFile (in: hFile=0x228, lpBuffer=0x268893d, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268893d*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0242.054] ReadFile (in: hFile=0x228, lpBuffer=0x2688a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2688a38*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0242.054] CloseHandle (hObject=0x228) returned 1 [0242.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png", lpFilePart=0x0) returned 0x36 [0242.054] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C9NTH0A64Qe.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c9nth0a64qe.png")) returned 1 [0242.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png.EnyBenied", lpFilePart=0x0) returned 0x3d [0242.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0242.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dkecyoq4.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0242.058] GetFileType (hFile=0x238) returned 0x1 [0242.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0242.058] GetFileType (hFile=0x238) returned 0x1 [0242.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png", lpFilePart=0x0) returned 0x33 [0242.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0242.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dkecyoq4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0242.494] GetFileType (hFile=0x228) returned 0x1 [0242.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0242.494] GetFileType (hFile=0x228) returned 0x1 [0242.494] ReadFile (in: hFile=0x228, lpBuffer=0x27d44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d44b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.499] ReadFile (in: hFile=0x228, lpBuffer=0x27d44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d44b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.500] ReadFile (in: hFile=0x228, lpBuffer=0x27d44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d44b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.500] ReadFile (in: hFile=0x228, lpBuffer=0x27d44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d44b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.500] ReadFile (in: hFile=0x228, lpBuffer=0x27d44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d44b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.501] ReadFile (in: hFile=0x228, lpBuffer=0x27d44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d44b0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.501] ReadFile (in: hFile=0x228, lpBuffer=0x27d44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d44b0*, lpNumberOfBytesRead=0x1add88*=0x7ac, lpOverlapped=0x0) returned 1 [0242.501] ReadFile (in: hFile=0x228, lpBuffer=0x27d4444, nNumberOfBytesToRead=0x54, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d4444*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0242.501] ReadFile (in: hFile=0x228, lpBuffer=0x27d44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d44b0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0242.501] CloseHandle (hObject=0x228) returned 1 [0242.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png", lpFilePart=0x0) returned 0x33 [0242.501] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dKECYoQ4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dkecyoq4.png")) returned 1 [0242.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x3c [0242.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0242.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0242.520] GetFileType (hFile=0x238) returned 0x1 [0242.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0242.520] GetFileType (hFile=0x238) returned 0x1 [0242.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png", lpFilePart=0x0) returned 0x32 [0242.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0242.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0242.934] GetFileType (hFile=0x228) returned 0x1 [0242.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0242.934] GetFileType (hFile=0x228) returned 0x1 [0242.934] ReadFile (in: hFile=0x228, lpBuffer=0x27220d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27220d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.938] ReadFile (in: hFile=0x228, lpBuffer=0x27220d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27220d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.939] ReadFile (in: hFile=0x228, lpBuffer=0x27220d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27220d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.940] ReadFile (in: hFile=0x228, lpBuffer=0x27220d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27220d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.940] ReadFile (in: hFile=0x228, lpBuffer=0x27220d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27220d0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0242.940] ReadFile (in: hFile=0x228, lpBuffer=0x27220d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27220d0*, lpNumberOfBytesRead=0x1add88*=0xdf, lpOverlapped=0x0) returned 1 [0242.940] ReadFile (in: hFile=0x228, lpBuffer=0x27220d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27220d0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0242.940] CloseHandle (hObject=0x228) returned 1 [0242.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png", lpFilePart=0x0) returned 0x32 [0242.940] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\enybeny.png")) returned 1 [0242.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg.EnyBenied", lpFilePart=0x0) returned 0x41 [0242.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0242.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fxy2dup 9heh.jpg.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0242.943] GetFileType (hFile=0x238) returned 0x1 [0242.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0242.943] GetFileType (hFile=0x238) returned 0x1 [0243.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg", lpFilePart=0x0) returned 0x37 [0243.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0243.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fxy2dup 9heh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0243.349] GetFileType (hFile=0x228) returned 0x1 [0243.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0243.350] GetFileType (hFile=0x228) returned 0x1 [0243.350] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.356] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.356] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.357] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.357] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.357] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.358] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.358] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.358] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.358] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.359] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0xbfa, lpOverlapped=0x0) returned 1 [0243.359] ReadFile (in: hFile=0x228, lpBuffer=0x266e5da, nNumberOfBytesToRead=0x6, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5da*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0243.359] ReadFile (in: hFile=0x228, lpBuffer=0x266e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266e5f8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0243.359] CloseHandle (hObject=0x228) returned 1 [0243.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg", lpFilePart=0x0) returned 0x37 [0243.359] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fXY2dup 9heh.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fxy2dup 9heh.jpg")) returned 1 [0243.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png.EnyBenied", lpFilePart=0x0) returned 0x45 [0243.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0243.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\i15rjw0ofoxvuh9z.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0243.363] GetFileType (hFile=0x238) returned 0x1 [0243.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0243.363] GetFileType (hFile=0x238) returned 0x1 [0243.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png", lpFilePart=0x0) returned 0x3b [0243.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0243.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\i15rjw0ofoxvuh9z.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0243.797] GetFileType (hFile=0x228) returned 0x1 [0243.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0243.797] GetFileType (hFile=0x228) returned 0x1 [0243.797] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.803] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.804] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.804] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.804] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.805] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.805] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0243.805] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0xb14, lpOverlapped=0x0) returned 1 [0243.805] ReadFile (in: hFile=0x228, lpBuffer=0x27c0704, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0704*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0243.806] ReadFile (in: hFile=0x228, lpBuffer=0x27c0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0808*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0243.806] CloseHandle (hObject=0x228) returned 1 [0243.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png", lpFilePart=0x0) returned 0x3b [0243.806] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i15RJw0OfOXvUH9z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\i15rjw0ofoxvuh9z.png")) returned 1 [0243.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png.EnyBenied", lpFilePart=0x0) returned 0x42 [0243.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0243.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ipmycxu8flu4h.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0243.810] GetFileType (hFile=0x238) returned 0x1 [0243.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0243.810] GetFileType (hFile=0x238) returned 0x1 [0244.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png", lpFilePart=0x0) returned 0x38 [0244.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0244.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ipmycxu8flu4h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0244.222] GetFileType (hFile=0x228) returned 0x1 [0244.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0244.222] GetFileType (hFile=0x228) returned 0x1 [0244.222] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.226] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.229] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.229] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.229] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.230] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.230] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.230] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.231] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.231] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.231] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.231] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.232] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.232] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x4c3, lpOverlapped=0x0) returned 1 [0244.232] ReadFile (in: hFile=0x228, lpBuffer=0x270f52b, nNumberOfBytesToRead=0x33d, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f52b*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0244.232] ReadFile (in: hFile=0x228, lpBuffer=0x270f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x270f880*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0244.232] CloseHandle (hObject=0x228) returned 1 [0244.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png", lpFilePart=0x0) returned 0x38 [0244.233] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpMYcxu8flU4h.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ipmycxu8flu4h.png")) returned 1 [0244.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png.EnyBenied", lpFilePart=0x0) returned 0x40 [0244.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0244.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\lp4mv_7mmym.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0244.236] GetFileType (hFile=0x238) returned 0x1 [0244.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0244.236] GetFileType (hFile=0x238) returned 0x1 [0244.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png", lpFilePart=0x0) returned 0x36 [0244.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0244.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\lp4mv_7mmym.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0244.688] GetFileType (hFile=0x228) returned 0x1 [0244.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0244.688] GetFileType (hFile=0x228) returned 0x1 [0244.688] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.695] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.695] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.696] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.696] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.696] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.696] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.697] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.697] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.697] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.698] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.698] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.698] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.698] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.699] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.699] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.699] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.699] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.700] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.700] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0244.700] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x7c6, lpOverlapped=0x0) returned 1 [0244.700] ReadFile (in: hFile=0x228, lpBuffer=0x266442e, nNumberOfBytesToRead=0x3a, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266442e*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0244.700] ReadFile (in: hFile=0x228, lpBuffer=0x2664480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2664480*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0244.701] CloseHandle (hObject=0x228) returned 1 [0244.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png", lpFilePart=0x0) returned 0x36 [0244.701] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lP4mv_7MmYM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\lp4mv_7mmym.png")) returned 1 [0244.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png.EnyBenied", lpFilePart=0x0) returned 0x40 [0244.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0244.703] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\t-t1i euuuy.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0244.704] GetFileType (hFile=0x238) returned 0x1 [0244.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0244.704] GetFileType (hFile=0x238) returned 0x1 [0245.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png", lpFilePart=0x0) returned 0x36 [0245.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0245.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\t-t1i euuuy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0245.286] GetFileType (hFile=0x228) returned 0x1 [0245.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0245.286] GetFileType (hFile=0x228) returned 0x1 [0245.286] ReadFile (in: hFile=0x228, lpBuffer=0x27c0628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0628*, lpNumberOfBytesRead=0x1add88*=0xfed, lpOverlapped=0x0) returned 1 [0245.291] ReadFile (in: hFile=0x228, lpBuffer=0x27c05fd, nNumberOfBytesToRead=0x13, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c05fd*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0245.292] ReadFile (in: hFile=0x228, lpBuffer=0x27c0628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27c0628*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0245.292] CloseHandle (hObject=0x228) returned 1 [0245.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png", lpFilePart=0x0) returned 0x36 [0245.293] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t-T1i EUuuy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\t-t1i euuuy.png")) returned 1 [0245.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png.EnyBenied", lpFilePart=0x0) returned 0x3c [0245.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0245.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z_ajlam.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.296] GetFileType (hFile=0x238) returned 0x1 [0245.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0245.296] GetFileType (hFile=0x238) returned 0x1 [0245.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png", lpFilePart=0x0) returned 0x32 [0245.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0245.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z_ajlam.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0245.740] GetFileType (hFile=0x228) returned 0x1 [0245.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0245.741] GetFileType (hFile=0x228) returned 0x1 [0245.741] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.747] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.747] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.748] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.748] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.748] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.749] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.749] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.749] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.750] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0245.750] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0xfc9, lpOverlapped=0x0) returned 1 [0245.750] ReadFile (in: hFile=0x228, lpBuffer=0x27088e1, nNumberOfBytesToRead=0x37, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27088e1*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0245.750] ReadFile (in: hFile=0x228, lpBuffer=0x2708930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2708930*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0245.750] CloseHandle (hObject=0x228) returned 1 [0245.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png", lpFilePart=0x0) returned 0x32 [0245.751] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Z_AjLaM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z_ajlam.png")) returned 1 [0245.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.TXT", lpFilePart=0x0) returned 0x32 [0245.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.756] GetFileType (hFile=0x238) returned 0x1 [0245.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.756] GetFileType (hFile=0x238) returned 0x1 [0245.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png", lpFilePart=0x0) returned 0x32 [0245.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0245.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.757] GetFileType (hFile=0x238) returned 0x1 [0245.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0245.757] GetFileType (hFile=0x238) returned 0x1 [0245.757] WriteFile (in: hFile=0x238, lpBuffer=0x271f270*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x271f270*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0245.758] CloseHandle (hObject=0x238) returned 1 [0245.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5d [0245.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.759] GetFileType (hFile=0x238) returned 0x1 [0245.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.759] GetFileType (hFile=0x238) returned 0x1 [0245.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0245.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", lpFilePart=0x0) returned 0x28 [0245.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0245.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0245.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\ENYBENY.TXT", lpFilePart=0x0) returned 0x33 [0245.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.766] GetFileType (hFile=0x238) returned 0x1 [0245.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.766] GetFileType (hFile=0x238) returned 0x1 [0245.767] WriteFile (in: hFile=0x238, lpBuffer=0x2731568*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2731568*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0245.768] CloseHandle (hObject=0x238) returned 1 [0245.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\ENYBENY.png", lpFilePart=0x0) returned 0x33 [0245.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0245.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.770] GetFileType (hFile=0x238) returned 0x1 [0245.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0245.770] GetFileType (hFile=0x238) returned 0x1 [0245.770] WriteFile (in: hFile=0x238, lpBuffer=0x2732600*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2732600*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0245.771] CloseHandle (hObject=0x238) returned 1 [0245.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5e [0245.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.773] GetFileType (hFile=0x238) returned 0x1 [0245.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.773] GetFileType (hFile=0x238) returned 0x1 [0245.774] WriteFile (in: hFile=0x238, lpBuffer=0x27391e8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27391e8*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0245.775] CloseHandle (hObject=0x238) returned 1 [0245.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0245.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", lpFilePart=0x0) returned 0x25 [0245.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0245.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0245.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\ENYBENY.TXT", lpFilePart=0x0) returned 0x30 [0245.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.784] GetFileType (hFile=0x238) returned 0x1 [0245.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.785] GetFileType (hFile=0x238) returned 0x1 [0245.785] WriteFile (in: hFile=0x238, lpBuffer=0x27448c0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27448c0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0245.786] CloseHandle (hObject=0x238) returned 1 [0245.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\ENYBENY.png", lpFilePart=0x0) returned 0x30 [0245.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0245.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.788] GetFileType (hFile=0x238) returned 0x1 [0245.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0245.788] GetFileType (hFile=0x238) returned 0x1 [0245.788] WriteFile (in: hFile=0x238, lpBuffer=0x2745958*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2745958*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0245.789] CloseHandle (hObject=0x238) returned 1 [0245.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5b [0245.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.791] GetFileType (hFile=0x238) returned 0x1 [0245.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.791] GetFileType (hFile=0x238) returned 0x1 [0245.791] WriteFile (in: hFile=0x238, lpBuffer=0x274c530*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x274c530*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0245.792] CloseHandle (hObject=0x238) returned 1 [0245.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0245.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a [0245.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0245.793] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.793] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.793] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0245.793] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0245.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0245.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0245.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0245.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a [0245.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0245.793] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.794] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.794] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0245.794] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0245.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0245.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0245.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\ENYBENY.TXT", lpFilePart=0x0) returned 0x35 [0245.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.797] GetFileType (hFile=0x238) returned 0x1 [0245.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.797] GetFileType (hFile=0x238) returned 0x1 [0245.798] WriteFile (in: hFile=0x238, lpBuffer=0x27587a0*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27587a0*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0245.798] CloseHandle (hObject=0x238) returned 1 [0245.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\ENYBENY.png", lpFilePart=0x0) returned 0x35 [0245.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0245.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.799] GetFileType (hFile=0x238) returned 0x1 [0245.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0245.799] GetFileType (hFile=0x238) returned 0x1 [0245.800] WriteFile (in: hFile=0x238, lpBuffer=0x2759840*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2759840*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0245.801] CloseHandle (hObject=0x238) returned 1 [0245.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x60 [0245.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.817] GetFileType (hFile=0x238) returned 0x1 [0245.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.818] GetFileType (hFile=0x238) returned 0x1 [0245.818] WriteFile (in: hFile=0x238, lpBuffer=0x2760440*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2760440*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0245.819] CloseHandle (hObject=0x238) returned 1 [0245.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0245.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27 [0245.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0245.820] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.820] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.820] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.820] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.820] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0245.820] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0245.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0245.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0245.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0245.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27 [0245.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0245.821] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.821] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.821] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.821] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.821] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0245.822] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0245.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0245.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0245.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\ENYBENY.TXT", lpFilePart=0x0) returned 0x32 [0245.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.823] GetFileType (hFile=0x238) returned 0x1 [0245.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.823] GetFileType (hFile=0x238) returned 0x1 [0245.824] WriteFile (in: hFile=0x238, lpBuffer=0x276cef8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x276cef8*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0245.825] CloseHandle (hObject=0x238) returned 1 [0245.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\ENYBENY.png", lpFilePart=0x0) returned 0x32 [0245.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0245.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.826] GetFileType (hFile=0x238) returned 0x1 [0245.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0245.827] GetFileType (hFile=0x238) returned 0x1 [0245.827] WriteFile (in: hFile=0x238, lpBuffer=0x276df90*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x276df90*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0245.828] CloseHandle (hObject=0x238) returned 1 [0245.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5d [0245.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.829] GetFileType (hFile=0x238) returned 0x1 [0245.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.829] GetFileType (hFile=0x238) returned 0x1 [0245.830] WriteFile (in: hFile=0x238, lpBuffer=0x2774b78*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2774b78*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0245.831] CloseHandle (hObject=0x238) returned 1 [0245.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0245.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", lpFilePart=0x0) returned 0x25 [0245.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0245.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0245.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\ENYBENY.TXT", lpFilePart=0x0) returned 0x30 [0245.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.854] GetFileType (hFile=0x238) returned 0x1 [0245.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.854] GetFileType (hFile=0x238) returned 0x1 [0245.855] WriteFile (in: hFile=0x238, lpBuffer=0x2780250*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2780250*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0245.855] CloseHandle (hObject=0x238) returned 1 [0245.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\ENYBENY.png", lpFilePart=0x0) returned 0x30 [0245.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0245.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.857] GetFileType (hFile=0x238) returned 0x1 [0245.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0245.857] GetFileType (hFile=0x238) returned 0x1 [0245.857] WriteFile (in: hFile=0x238, lpBuffer=0x27812e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x27812e8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0245.858] CloseHandle (hObject=0x238) returned 1 [0245.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5b [0245.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.859] GetFileType (hFile=0x238) returned 0x1 [0245.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.859] GetFileType (hFile=0x238) returned 0x1 [0245.859] WriteFile (in: hFile=0x238, lpBuffer=0x2787ec0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2787ec0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0245.860] CloseHandle (hObject=0x238) returned 1 [0245.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0245.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", lpFilePart=0x0) returned 0x29 [0245.860] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0245.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0245.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\ENYBENY.TXT", lpFilePart=0x0) returned 0x34 [0245.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.867] GetFileType (hFile=0x238) returned 0x1 [0245.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.867] GetFileType (hFile=0x238) returned 0x1 [0245.867] WriteFile (in: hFile=0x238, lpBuffer=0x27935f8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27935f8*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0245.868] CloseHandle (hObject=0x238) returned 1 [0245.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\ENYBENY.png", lpFilePart=0x0) returned 0x34 [0245.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0245.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.871] GetFileType (hFile=0x238) returned 0x1 [0245.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0245.871] GetFileType (hFile=0x238) returned 0x1 [0245.871] WriteFile (in: hFile=0x238, lpBuffer=0x2794698*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2794698*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0245.873] CloseHandle (hObject=0x238) returned 1 [0245.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5f [0245.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.876] GetFileType (hFile=0x238) returned 0x1 [0245.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.877] GetFileType (hFile=0x238) returned 0x1 [0245.877] WriteFile (in: hFile=0x238, lpBuffer=0x279b288*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x279b288*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0245.878] CloseHandle (hObject=0x238) returned 1 [0245.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0245.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", lpFilePart=0x0) returned 0x28 [0245.878] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0245.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0245.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\ENYBENY.TXT", lpFilePart=0x0) returned 0x33 [0245.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.885] GetFileType (hFile=0x238) returned 0x1 [0245.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.885] GetFileType (hFile=0x238) returned 0x1 [0245.886] WriteFile (in: hFile=0x238, lpBuffer=0x27a6998*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27a6998*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0245.887] CloseHandle (hObject=0x238) returned 1 [0245.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\ENYBENY.png", lpFilePart=0x0) returned 0x33 [0245.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0245.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.895] GetFileType (hFile=0x238) returned 0x1 [0245.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0245.895] GetFileType (hFile=0x238) returned 0x1 [0245.895] WriteFile (in: hFile=0x238, lpBuffer=0x27a7a30*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x27a7a30*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0245.896] CloseHandle (hObject=0x238) returned 1 [0245.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5e [0245.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0245.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0245.898] GetFileType (hFile=0x238) returned 0x1 [0245.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0245.898] GetFileType (hFile=0x238) returned 0x1 [0245.898] WriteFile (in: hFile=0x238, lpBuffer=0x27ae618*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27ae618*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0245.899] CloseHandle (hObject=0x238) returned 1 [0245.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0245.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0245.899] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0245.900] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.900] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.900] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.900] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.900] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.900] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.901] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.902] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.902] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.902] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.902] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.902] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.902] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.902] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.903] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.903] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.903] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.903] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.903] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.903] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.903] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.904] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.904] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.904] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.904] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.904] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.904] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.905] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.905] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.905] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.905] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.905] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.905] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.905] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.906] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.906] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.906] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0245.906] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0245.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0245.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0245.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0245.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0245.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0245.906] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0245.907] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.907] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.907] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.907] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.907] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.907] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.907] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.908] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.908] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.908] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.908] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.908] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.908] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.908] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.908] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.910] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.911] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.911] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.911] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.911] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.911] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.911] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.911] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.911] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.912] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.912] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.912] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0245.912] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0245.912] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0245.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0245.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0245.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4.EnyBenied", lpFilePart=0x0) returned 0x3c [0245.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0245.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ua5-ptt2.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0245.914] GetFileType (hFile=0x238) returned 0x1 [0245.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0245.914] GetFileType (hFile=0x238) returned 0x1 [0246.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4", lpFilePart=0x0) returned 0x32 [0246.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0246.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ua5-ptt2.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0246.331] GetFileType (hFile=0x228) returned 0x1 [0246.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0246.331] GetFileType (hFile=0x228) returned 0x1 [0246.331] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.338] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.338] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.338] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.339] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.339] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.339] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.340] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.340] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.340] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.340] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.341] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.341] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.341] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.342] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.342] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.342] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.342] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.343] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.343] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.343] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.343] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.344] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.344] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0xa37, lpOverlapped=0x0) returned 1 [0246.344] ReadFile (in: hFile=0x228, lpBuffer=0x2702b07, nNumberOfBytesToRead=0x1c9, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702b07*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0246.344] ReadFile (in: hFile=0x228, lpBuffer=0x2702ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2702ce8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0246.344] CloseHandle (hObject=0x228) returned 1 [0246.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4", lpFilePart=0x0) returned 0x32 [0246.345] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-Ua5-pTt2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ua5-ptt2.mp4")) returned 1 [0246.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4.EnyBenied", lpFilePart=0x0) returned 0x39 [0246.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0246.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\10dlga.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0246.348] GetFileType (hFile=0x238) returned 0x1 [0246.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0246.348] GetFileType (hFile=0x238) returned 0x1 [0246.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4", lpFilePart=0x0) returned 0x2f [0246.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0246.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\10dlga.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0246.914] GetFileType (hFile=0x228) returned 0x1 [0246.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0246.914] GetFileType (hFile=0x228) returned 0x1 [0246.914] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.930] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.930] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.930] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x367, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0x228, lpBuffer=0x26621e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26621e8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0246.932] CloseHandle (hObject=0x228) returned 1 [0246.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4", lpFilePart=0x0) returned 0x2f [0246.932] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\10dlGA.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\10dlga.mp4")) returned 1 [0246.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4.EnyBenied", lpFilePart=0x0) returned 0x41 [0246.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0246.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6lwwwqwlaz7jvk.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0246.973] GetFileType (hFile=0x238) returned 0x1 [0246.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0246.973] GetFileType (hFile=0x238) returned 0x1 [0247.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4", lpFilePart=0x0) returned 0x37 [0247.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0247.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6lwwwqwlaz7jvk.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0247.432] GetFileType (hFile=0x228) returned 0x1 [0247.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0247.432] GetFileType (hFile=0x228) returned 0x1 [0247.432] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.438] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.438] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.438] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.439] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.439] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.439] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.440] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x877, lpOverlapped=0x0) returned 1 [0247.440] ReadFile (in: hFile=0x228, lpBuffer=0x27b167f, nNumberOfBytesToRead=0x389, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b167f*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0247.440] ReadFile (in: hFile=0x228, lpBuffer=0x27b1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27b1a20*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0247.440] CloseHandle (hObject=0x228) returned 1 [0247.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4", lpFilePart=0x0) returned 0x37 [0247.440] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6lwWWQwLaz7jVK.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6lwwwqwlaz7jvk.mp4")) returned 1 [0247.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4.EnyBenied", lpFilePart=0x0) returned 0x3a [0247.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0247.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6qgv7u5.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0247.443] GetFileType (hFile=0x238) returned 0x1 [0247.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0247.444] GetFileType (hFile=0x238) returned 0x1 [0247.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4", lpFilePart=0x0) returned 0x30 [0247.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0247.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6qgv7u5.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0247.906] GetFileType (hFile=0x228) returned 0x1 [0247.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0247.906] GetFileType (hFile=0x228) returned 0x1 [0247.906] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.911] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.912] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.912] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.912] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.912] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.913] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0247.913] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x2c3, lpOverlapped=0x0) returned 1 [0247.913] ReadFile (in: hFile=0x228, lpBuffer=0x2700758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2700758*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0247.913] CloseHandle (hObject=0x228) returned 1 [0247.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4", lpFilePart=0x0) returned 0x30 [0247.913] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6qgv7U5.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6qgv7u5.mp4")) returned 1 [0247.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv.EnyBenied", lpFilePart=0x0) returned 0x3e [0247.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0247.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8dm9uvzolgu.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0247.922] GetFileType (hFile=0x238) returned 0x1 [0247.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0247.922] GetFileType (hFile=0x238) returned 0x1 [0248.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv", lpFilePart=0x0) returned 0x34 [0248.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0248.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8dm9uvzolgu.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0248.392] GetFileType (hFile=0x228) returned 0x1 [0248.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0248.392] GetFileType (hFile=0x228) returned 0x1 [0248.392] ReadFile (in: hFile=0x228, lpBuffer=0x264eab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264eab8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.398] ReadFile (in: hFile=0x228, lpBuffer=0x264eab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264eab8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.398] ReadFile (in: hFile=0x228, lpBuffer=0x264eab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264eab8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.399] ReadFile (in: hFile=0x228, lpBuffer=0x264eab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264eab8*, lpNumberOfBytesRead=0x1add88*=0x2c1, lpOverlapped=0x0) returned 1 [0248.399] ReadFile (in: hFile=0x228, lpBuffer=0x264eab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264eab8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0248.399] CloseHandle (hObject=0x228) returned 1 [0248.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv", lpFilePart=0x0) returned 0x34 [0248.399] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DM9Uvzolgu.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8dm9uvzolgu.flv")) returned 1 [0248.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv.EnyBenied", lpFilePart=0x0) returned 0x39 [0248.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0248.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8x2kon.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0248.402] GetFileType (hFile=0x238) returned 0x1 [0248.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0248.402] GetFileType (hFile=0x238) returned 0x1 [0248.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv", lpFilePart=0x0) returned 0x2f [0248.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0248.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8x2kon.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0248.897] GetFileType (hFile=0x228) returned 0x1 [0248.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0248.897] GetFileType (hFile=0x228) returned 0x1 [0248.897] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.903] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.903] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.904] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.904] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.904] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.904] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.904] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.904] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.905] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.905] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.905] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.905] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.905] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.906] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.906] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.906] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.906] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.906] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.907] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.907] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0248.907] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x965, lpOverlapped=0x0) returned 1 [0248.907] ReadFile (in: hFile=0x228, lpBuffer=0x27987bd, nNumberOfBytesToRead=0x29b, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27987bd*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0248.907] ReadFile (in: hFile=0x228, lpBuffer=0x2798a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2798a70*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0248.907] CloseHandle (hObject=0x228) returned 1 [0248.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv", lpFilePart=0x0) returned 0x2f [0248.908] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8X2koN.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8x2kon.flv")) returned 1 [0248.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv.EnyBenied", lpFilePart=0x0) returned 0x47 [0248.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0248.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\9xje70swfq-avr_dymoc.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0248.911] GetFileType (hFile=0x238) returned 0x1 [0248.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0248.911] GetFileType (hFile=0x238) returned 0x1 [0249.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv", lpFilePart=0x0) returned 0x3d [0249.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0249.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\9xje70swfq-avr_dymoc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0249.371] GetFileType (hFile=0x228) returned 0x1 [0249.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0249.371] GetFileType (hFile=0x228) returned 0x1 [0249.371] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.378] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.378] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.378] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.379] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.379] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.379] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.380] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.380] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.380] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.381] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.381] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.381] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.381] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.382] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.382] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.382] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.382] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.383] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.383] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0xb73, lpOverlapped=0x0) returned 1 [0249.383] ReadFile (in: hFile=0x228, lpBuffer=0x26f41a3, nNumberOfBytesToRead=0x8d, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f41a3*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0249.383] ReadFile (in: hFile=0x228, lpBuffer=0x26f4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26f4248*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0249.383] CloseHandle (hObject=0x228) returned 1 [0249.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv", lpFilePart=0x0) returned 0x3d [0249.384] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9xjE70sWFQ-avr_DYmOc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\9xje70swfq-avr_dymoc.flv")) returned 1 [0249.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi.EnyBenied", lpFilePart=0x0) returned 0x45 [0249.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0249.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ccgzgpro5pqqov4xxb.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0249.388] GetFileType (hFile=0x238) returned 0x1 [0249.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0249.388] GetFileType (hFile=0x238) returned 0x1 [0249.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi", lpFilePart=0x0) returned 0x3b [0249.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0249.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ccgzgpro5pqqov4xxb.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0249.806] GetFileType (hFile=0x228) returned 0x1 [0249.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0249.806] GetFileType (hFile=0x228) returned 0x1 [0249.806] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.813] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.813] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.813] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.814] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.814] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.814] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.814] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.815] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0249.815] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0xe6a, lpOverlapped=0x0) returned 1 [0249.815] ReadFile (in: hFile=0x228, lpBuffer=0x264d9ba, nNumberOfBytesToRead=0x196, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264d9ba*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0249.815] ReadFile (in: hFile=0x228, lpBuffer=0x264db68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x264db68*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0249.815] CloseHandle (hObject=0x228) returned 1 [0249.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi", lpFilePart=0x0) returned 0x3b [0249.816] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ccGZgPRo5pQqov4XXB.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ccgzgpro5pqqov4xxb.avi")) returned 1 [0249.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi.EnyBenied", lpFilePart=0x0) returned 0x37 [0249.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0249.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\d4x-.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0249.820] GetFileType (hFile=0x238) returned 0x1 [0249.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0249.820] GetFileType (hFile=0x238) returned 0x1 [0250.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi", lpFilePart=0x0) returned 0x2d [0250.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0250.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\d4x-.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0250.302] GetFileType (hFile=0x228) returned 0x1 [0250.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0250.302] GetFileType (hFile=0x228) returned 0x1 [0250.302] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.308] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.308] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.308] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.309] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.309] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.309] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.310] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.310] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0xb2b, lpOverlapped=0x0) returned 1 [0250.310] ReadFile (in: hFile=0x228, lpBuffer=0x277e8f3, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e8f3*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0250.310] ReadFile (in: hFile=0x228, lpBuffer=0x277e9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x277e9e0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0250.310] CloseHandle (hObject=0x228) returned 1 [0250.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi", lpFilePart=0x0) returned 0x2d [0250.311] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\d4X-.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\d4x-.avi")) returned 1 [0250.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv.EnyBenied", lpFilePart=0x0) returned 0x3f [0250.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0250.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dldcfdhhg3 q.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0250.314] GetFileType (hFile=0x238) returned 0x1 [0250.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0250.314] GetFileType (hFile=0x238) returned 0x1 [0250.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv", lpFilePart=0x0) returned 0x35 [0250.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0250.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dldcfdhhg3 q.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0250.861] GetFileType (hFile=0x228) returned 0x1 [0250.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0250.862] GetFileType (hFile=0x228) returned 0x1 [0250.862] ReadFile (in: hFile=0x228, lpBuffer=0x26ceab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ceab8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.868] ReadFile (in: hFile=0x228, lpBuffer=0x26ceab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ceab8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.869] ReadFile (in: hFile=0x228, lpBuffer=0x26ceab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ceab8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.869] ReadFile (in: hFile=0x228, lpBuffer=0x26ceab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ceab8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0250.870] ReadFile (in: hFile=0x228, lpBuffer=0x26ceab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ceab8*, lpNumberOfBytesRead=0x1add88*=0x5b6, lpOverlapped=0x0) returned 1 [0250.870] ReadFile (in: hFile=0x228, lpBuffer=0x26ce856, nNumberOfBytesToRead=0x24a, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ce856*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0250.870] ReadFile (in: hFile=0x228, lpBuffer=0x26ceab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ceab8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0250.870] CloseHandle (hObject=0x228) returned 1 [0250.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv", lpFilePart=0x0) returned 0x35 [0250.870] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DLdCFdHhg3 q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dldcfdhhg3 q.flv")) returned 1 [0250.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi.EnyBenied", lpFilePart=0x0) returned 0x40 [0250.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0250.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dxmnao1ddiavl.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0250.873] GetFileType (hFile=0x238) returned 0x1 [0250.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0250.873] GetFileType (hFile=0x238) returned 0x1 [0251.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi", lpFilePart=0x0) returned 0x36 [0251.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0251.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dxmnao1ddiavl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0251.392] GetFileType (hFile=0x228) returned 0x1 [0251.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0251.392] GetFileType (hFile=0x228) returned 0x1 [0251.392] ReadFile (in: hFile=0x228, lpBuffer=0x261a438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x261a438*, lpNumberOfBytesRead=0x1add88*=0xc50, lpOverlapped=0x0) returned 1 [0251.395] ReadFile (in: hFile=0x228, lpBuffer=0x261a070, nNumberOfBytesToRead=0x3b0, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x261a070*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0251.395] ReadFile (in: hFile=0x228, lpBuffer=0x261a438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x261a438*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0251.396] CloseHandle (hObject=0x228) returned 1 [0251.396] WriteFile (in: hFile=0x238, lpBuffer=0x26189e0*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x26189e0*, lpNumberOfBytesWritten=0x1adc58*=0xc80, lpOverlapped=0x0) returned 1 [0251.396] CloseHandle (hObject=0x238) returned 1 [0251.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi", lpFilePart=0x0) returned 0x36 [0251.397] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DXmnao1ddiAVL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dxmnao1ddiavl.avi")) returned 1 [0251.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv.EnyBenied", lpFilePart=0x0) returned 0x39 [0251.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0251.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ecapjv.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0251.399] GetFileType (hFile=0x238) returned 0x1 [0251.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0251.399] GetFileType (hFile=0x238) returned 0x1 [0251.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv", lpFilePart=0x0) returned 0x2f [0251.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0251.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ecapjv.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0251.885] GetFileType (hFile=0x228) returned 0x1 [0251.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0251.885] GetFileType (hFile=0x228) returned 0x1 [0251.885] ReadFile (in: hFile=0x228, lpBuffer=0x2762240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2762240*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0251.892] ReadFile (in: hFile=0x228, lpBuffer=0x2762240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2762240*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0251.892] ReadFile (in: hFile=0x228, lpBuffer=0x2762240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2762240*, lpNumberOfBytesRead=0x1add88*=0x39d, lpOverlapped=0x0) returned 1 [0251.892] ReadFile (in: hFile=0x228, lpBuffer=0x2762240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2762240*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0251.892] CloseHandle (hObject=0x228) returned 1 [0251.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv", lpFilePart=0x0) returned 0x2f [0251.892] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Ecapjv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ecapjv.flv")) returned 1 [0251.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x3a [0251.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0251.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0251.896] GetFileType (hFile=0x238) returned 0x1 [0251.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0251.896] GetFileType (hFile=0x238) returned 0x1 [0252.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png", lpFilePart=0x0) returned 0x30 [0252.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0252.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0252.441] GetFileType (hFile=0x228) returned 0x1 [0252.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0252.441] GetFileType (hFile=0x228) returned 0x1 [0252.441] ReadFile (in: hFile=0x228, lpBuffer=0x26ab8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ab8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0252.443] ReadFile (in: hFile=0x228, lpBuffer=0x26ab8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ab8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0252.447] ReadFile (in: hFile=0x228, lpBuffer=0x26ab8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ab8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0252.448] ReadFile (in: hFile=0x228, lpBuffer=0x26ab8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ab8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0252.448] ReadFile (in: hFile=0x228, lpBuffer=0x26ab8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ab8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0252.448] ReadFile (in: hFile=0x228, lpBuffer=0x26ab8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ab8b8*, lpNumberOfBytesRead=0x1add88*=0xdf, lpOverlapped=0x0) returned 1 [0252.448] ReadFile (in: hFile=0x228, lpBuffer=0x26ab8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ab8b8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0252.448] CloseHandle (hObject=0x228) returned 1 [0252.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png", lpFilePart=0x0) returned 0x30 [0252.449] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\enybeny.png")) returned 1 [0252.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv.EnyBenied", lpFilePart=0x0) returned 0x40 [0252.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0252.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\f3bl53imgarpm.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0252.452] GetFileType (hFile=0x238) returned 0x1 [0252.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0252.452] GetFileType (hFile=0x238) returned 0x1 [0253.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv", lpFilePart=0x0) returned 0x36 [0253.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0253.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\f3bl53imgarpm.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0253.076] GetFileType (hFile=0x228) returned 0x1 [0253.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0253.076] GetFileType (hFile=0x228) returned 0x1 [0253.076] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.082] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.082] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.083] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.083] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.083] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.083] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.084] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.084] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.084] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.084] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.084] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.084] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.085] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x7da, lpOverlapped=0x0) returned 1 [0253.085] ReadFile (in: hFile=0x228, lpBuffer=0x25f7ff2, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f7ff2*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0253.085] ReadFile (in: hFile=0x228, lpBuffer=0x25f8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x25f8030*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0253.085] CloseHandle (hObject=0x228) returned 1 [0253.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv", lpFilePart=0x0) returned 0x36 [0253.085] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\f3Bl53iMgArPM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\f3bl53imgarpm.flv")) returned 1 [0253.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi.EnyBenied", lpFilePart=0x0) returned 0x3e [0253.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0253.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fi-rc1bnxv-.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0253.088] GetFileType (hFile=0x238) returned 0x1 [0253.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0253.088] GetFileType (hFile=0x238) returned 0x1 [0253.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi", lpFilePart=0x0) returned 0x34 [0253.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0253.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fi-rc1bnxv-.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0253.437] GetFileType (hFile=0x228) returned 0x1 [0253.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0253.437] GetFileType (hFile=0x228) returned 0x1 [0253.437] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.443] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.444] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.444] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.444] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.445] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.445] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.445] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.445] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.446] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0xd90, lpOverlapped=0x0) returned 1 [0253.446] ReadFile (in: hFile=0x228, lpBuffer=0x274bcd0, nNumberOfBytesToRead=0x270, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bcd0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0253.446] ReadFile (in: hFile=0x228, lpBuffer=0x274bf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x274bf58*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0253.446] CloseHandle (hObject=0x228) returned 1 [0253.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi", lpFilePart=0x0) returned 0x34 [0253.446] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FI-rc1Bnxv-.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fi-rc1bnxv-.avi")) returned 1 [0253.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4.EnyBenied", lpFilePart=0x0) returned 0x44 [0253.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0253.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\h5qgmhuqnvlpm6ey2.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0253.449] GetFileType (hFile=0x238) returned 0x1 [0253.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0253.449] GetFileType (hFile=0x238) returned 0x1 [0253.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4", lpFilePart=0x0) returned 0x3a [0253.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0253.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\h5qgmhuqnvlpm6ey2.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0253.860] GetFileType (hFile=0x228) returned 0x1 [0253.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0253.860] GetFileType (hFile=0x228) returned 0x1 [0253.860] ReadFile (in: hFile=0x228, lpBuffer=0x269d2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d2f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.865] ReadFile (in: hFile=0x228, lpBuffer=0x269d2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d2f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.865] ReadFile (in: hFile=0x228, lpBuffer=0x269d2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d2f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.866] ReadFile (in: hFile=0x228, lpBuffer=0x269d2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d2f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.866] ReadFile (in: hFile=0x228, lpBuffer=0x269d2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d2f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.866] ReadFile (in: hFile=0x228, lpBuffer=0x269d2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d2f8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0253.867] ReadFile (in: hFile=0x228, lpBuffer=0x269d2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d2f8*, lpNumberOfBytesRead=0x1add88*=0xdbc, lpOverlapped=0x0) returned 1 [0253.867] ReadFile (in: hFile=0x228, lpBuffer=0x269d09c, nNumberOfBytesToRead=0x244, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d09c*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0253.867] ReadFile (in: hFile=0x228, lpBuffer=0x269d2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x269d2f8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0253.867] CloseHandle (hObject=0x228) returned 1 [0253.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4", lpFilePart=0x0) returned 0x3a [0253.867] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\H5qGMHuQnVLpM6EY2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\h5qgmhuqnvlpm6ey2.mp4")) returned 1 [0253.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4.EnyBenied", lpFilePart=0x0) returned 0x42 [0253.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0253.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hfi1sm5wvbpsstg.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0253.870] GetFileType (hFile=0x238) returned 0x1 [0253.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0253.870] GetFileType (hFile=0x238) returned 0x1 [0254.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4", lpFilePart=0x0) returned 0x38 [0254.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0254.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hfi1sm5wvbpsstg.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0254.285] GetFileType (hFile=0x228) returned 0x1 [0254.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0254.285] GetFileType (hFile=0x228) returned 0x1 [0254.285] ReadFile (in: hFile=0x228, lpBuffer=0x27eb508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27eb508*, lpNumberOfBytesRead=0x1add88*=0x915, lpOverlapped=0x0) returned 1 [0254.288] ReadFile (in: hFile=0x228, lpBuffer=0x27eb205, nNumberOfBytesToRead=0x2eb, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27eb205*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0254.288] ReadFile (in: hFile=0x228, lpBuffer=0x27eb508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27eb508*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0254.288] CloseHandle (hObject=0x228) returned 1 [0254.288] WriteFile (in: hFile=0x238, lpBuffer=0x27e9aa8*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x27e9aa8*, lpNumberOfBytesWritten=0x1adc58*=0x940, lpOverlapped=0x0) returned 1 [0254.289] CloseHandle (hObject=0x238) returned 1 [0254.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4", lpFilePart=0x0) returned 0x38 [0254.289] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hFI1sm5WvBPSsTg.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hfi1sm5wvbpsstg.mp4")) returned 1 [0254.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv.EnyBenied", lpFilePart=0x0) returned 0x40 [0254.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0254.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jmm 0io82bqrw.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0254.291] GetFileType (hFile=0x238) returned 0x1 [0254.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0254.291] GetFileType (hFile=0x238) returned 0x1 [0254.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv", lpFilePart=0x0) returned 0x36 [0254.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0254.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jmm 0io82bqrw.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0254.644] GetFileType (hFile=0x228) returned 0x1 [0254.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0254.644] GetFileType (hFile=0x228) returned 0x1 [0254.644] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.650] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.650] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.650] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.650] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.651] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.651] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.651] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.651] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.651] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0254.652] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x3da, lpOverlapped=0x0) returned 1 [0254.652] ReadFile (in: hFile=0x228, lpBuffer=0x27330c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27330c0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0254.652] CloseHandle (hObject=0x228) returned 1 [0254.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv", lpFilePart=0x0) returned 0x36 [0254.652] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JMm 0Io82bQRW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jmm 0io82bqrw.flv")) returned 1 [0254.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi.EnyBenied", lpFilePart=0x0) returned 0x42 [0254.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0254.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mhcmzrrbmsklvme.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0254.655] GetFileType (hFile=0x238) returned 0x1 [0254.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0254.655] GetFileType (hFile=0x238) returned 0x1 [0255.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi", lpFilePart=0x0) returned 0x38 [0255.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0255.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mhcmzrrbmsklvme.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0255.064] GetFileType (hFile=0x228) returned 0x1 [0255.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0255.064] GetFileType (hFile=0x228) returned 0x1 [0255.064] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.069] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.069] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.069] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.070] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.070] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.070] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.070] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.070] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.071] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.071] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.071] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.071] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.071] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.072] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.072] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.072] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.072] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.073] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.073] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0xb7f, lpOverlapped=0x0) returned 1 [0255.073] ReadFile (in: hFile=0x228, lpBuffer=0x2684a3f, nNumberOfBytesToRead=0x81, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684a3f*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0255.073] ReadFile (in: hFile=0x228, lpBuffer=0x2684ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684ad8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0255.073] CloseHandle (hObject=0x228) returned 1 [0255.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi", lpFilePart=0x0) returned 0x38 [0255.073] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mhcmzrrBMsklvmE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mhcmzrrbmsklvme.avi")) returned 1 [0255.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv.EnyBenied", lpFilePart=0x0) returned 0x39 [0255.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0255.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\o7xdy0.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0255.076] GetFileType (hFile=0x238) returned 0x1 [0255.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0255.076] GetFileType (hFile=0x238) returned 0x1 [0255.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv", lpFilePart=0x0) returned 0x2f [0255.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0255.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\o7xdy0.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0255.405] GetFileType (hFile=0x228) returned 0x1 [0255.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0255.405] GetFileType (hFile=0x228) returned 0x1 [0255.405] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0xc1a, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x228, lpBuffer=0x27dfb7a, nNumberOfBytesToRead=0x3e6, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dfb7a*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x228, lpBuffer=0x27dff78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dff78*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0255.412] CloseHandle (hObject=0x228) returned 1 [0255.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv", lpFilePart=0x0) returned 0x2f [0255.412] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\o7xDY0.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\o7xdy0.flv")) returned 1 [0255.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4.EnyBenied", lpFilePart=0x0) returned 0x44 [0255.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0255.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\p3pyc87p5bgzsyxip.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0255.415] GetFileType (hFile=0x238) returned 0x1 [0255.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0255.415] GetFileType (hFile=0x238) returned 0x1 [0255.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4", lpFilePart=0x0) returned 0x3a [0255.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0255.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\p3pyc87p5bgzsyxip.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0255.779] GetFileType (hFile=0x228) returned 0x1 [0255.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0255.780] GetFileType (hFile=0x228) returned 0x1 [0255.780] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.783] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.786] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.786] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.786] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.787] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.787] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.787] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.787] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.788] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.788] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0255.788] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0xc8a, lpOverlapped=0x0) returned 1 [0255.788] ReadFile (in: hFile=0x228, lpBuffer=0x2730e12, nNumberOfBytesToRead=0x376, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2730e12*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0255.789] ReadFile (in: hFile=0x228, lpBuffer=0x27311a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27311a0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0255.789] CloseHandle (hObject=0x228) returned 1 [0255.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4", lpFilePart=0x0) returned 0x3a [0255.789] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\p3PYc87p5bGZsYxIP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\p3pyc87p5bgzsyxip.mp4")) returned 1 [0255.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi.EnyBenied", lpFilePart=0x0) returned 0x3d [0255.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0255.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pubav--acw.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0255.792] GetFileType (hFile=0x238) returned 0x1 [0255.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0255.792] GetFileType (hFile=0x238) returned 0x1 [0256.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi", lpFilePart=0x0) returned 0x33 [0256.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0256.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pubav--acw.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0256.227] GetFileType (hFile=0x228) returned 0x1 [0256.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0256.227] GetFileType (hFile=0x228) returned 0x1 [0256.227] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.232] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.232] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.232] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.233] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.233] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.233] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.233] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.233] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.234] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.234] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.234] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.234] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.234] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.235] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.235] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x1ee, lpOverlapped=0x0) returned 1 [0256.235] ReadFile (in: hFile=0x228, lpBuffer=0x26844d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26844d8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0256.235] CloseHandle (hObject=0x228) returned 1 [0256.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi", lpFilePart=0x0) returned 0x33 [0256.235] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Pubav--ACw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pubav--acw.avi")) returned 1 [0256.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi.EnyBenied", lpFilePart=0x0) returned 0x40 [0256.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0256.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pwquh-k6hrk9l.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0256.238] GetFileType (hFile=0x238) returned 0x1 [0256.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0256.238] GetFileType (hFile=0x238) returned 0x1 [0256.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi", lpFilePart=0x0) returned 0x36 [0256.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0256.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pwquh-k6hrk9l.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0256.586] GetFileType (hFile=0x228) returned 0x1 [0256.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0256.586] GetFileType (hFile=0x228) returned 0x1 [0256.586] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.591] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.591] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.592] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.592] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.592] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.592] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.592] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.593] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.593] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.593] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.593] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.593] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.594] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.594] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.594] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.594] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.594] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.595] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.595] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.595] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.595] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.595] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0256.595] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x272, lpOverlapped=0x0) returned 1 [0256.596] ReadFile (in: hFile=0x228, lpBuffer=0x27dae00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27dae00*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0256.596] CloseHandle (hObject=0x228) returned 1 [0256.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi", lpFilePart=0x0) returned 0x36 [0256.596] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PwQuh-K6HrK9L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pwquh-k6hrk9l.avi")) returned 1 [0256.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi.EnyBenied", lpFilePart=0x0) returned 0x46 [0256.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0256.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\qtwpp0o-rus2vb7zumr.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0256.599] GetFileType (hFile=0x238) returned 0x1 [0256.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0256.599] GetFileType (hFile=0x238) returned 0x1 [0257.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi", lpFilePart=0x0) returned 0x3c [0257.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0257.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\qtwpp0o-rus2vb7zumr.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0257.024] GetFileType (hFile=0x228) returned 0x1 [0257.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0257.024] GetFileType (hFile=0x228) returned 0x1 [0257.024] ReadFile (in: hFile=0x228, lpBuffer=0x2739be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739be0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.030] ReadFile (in: hFile=0x228, lpBuffer=0x2739be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739be0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.030] ReadFile (in: hFile=0x228, lpBuffer=0x2739be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739be0*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.030] ReadFile (in: hFile=0x228, lpBuffer=0x2739be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739be0*, lpNumberOfBytesRead=0x1add88*=0xb7c, lpOverlapped=0x0) returned 1 [0257.031] ReadFile (in: hFile=0x228, lpBuffer=0x2739b44, nNumberOfBytesToRead=0x84, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739b44*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0257.031] ReadFile (in: hFile=0x228, lpBuffer=0x2739be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2739be0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0257.031] CloseHandle (hObject=0x228) returned 1 [0257.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi", lpFilePart=0x0) returned 0x3c [0257.031] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\QtwpP0O-rUS2vb7zUmR.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\qtwpp0o-rus2vb7zumr.avi")) returned 1 [0257.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4.EnyBenied", lpFilePart=0x0) returned 0x38 [0257.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0257.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rex6s.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0257.034] GetFileType (hFile=0x238) returned 0x1 [0257.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0257.034] GetFileType (hFile=0x238) returned 0x1 [0257.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4", lpFilePart=0x0) returned 0x2e [0257.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0257.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rex6s.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0257.627] GetFileType (hFile=0x228) returned 0x1 [0257.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0257.628] GetFileType (hFile=0x228) returned 0x1 [0257.628] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.634] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.634] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.634] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.635] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.635] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.635] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.635] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.636] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.636] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.636] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0257.637] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x972, lpOverlapped=0x0) returned 1 [0257.637] ReadFile (in: hFile=0x228, lpBuffer=0x26843ba, nNumberOfBytesToRead=0x28e, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26843ba*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0257.637] ReadFile (in: hFile=0x228, lpBuffer=0x2684660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2684660*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0257.637] CloseHandle (hObject=0x228) returned 1 [0257.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4", lpFilePart=0x0) returned 0x2e [0257.640] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\REX6S.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rex6s.mp4")) returned 1 [0257.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi.EnyBenied", lpFilePart=0x0) returned 0x3c [0257.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0257.642] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\swvnlixzh.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0257.643] GetFileType (hFile=0x238) returned 0x1 [0257.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0257.643] GetFileType (hFile=0x238) returned 0x1 [0258.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi", lpFilePart=0x0) returned 0x32 [0258.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0258.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\swvnlixzh.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0258.149] GetFileType (hFile=0x228) returned 0x1 [0258.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0258.149] GetFileType (hFile=0x228) returned 0x1 [0258.149] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.155] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.156] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.156] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.156] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.156] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.157] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.157] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.157] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.158] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.158] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.158] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.159] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.159] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.159] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.159] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.160] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.160] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.160] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.160] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x8f9, lpOverlapped=0x0) returned 1 [0258.161] ReadFile (in: hFile=0x228, lpBuffer=0x27d6cd9, nNumberOfBytesToRead=0x307, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6cd9*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0258.161] ReadFile (in: hFile=0x228, lpBuffer=0x27d6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27d6ff8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0258.161] CloseHandle (hObject=0x228) returned 1 [0258.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi", lpFilePart=0x0) returned 0x32 [0258.161] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sWvNLixZH.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\swvnlixzh.avi")) returned 1 [0258.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv.EnyBenied", lpFilePart=0x0) returned 0x44 [0258.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0258.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tal_bns9nad8yaxvn.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0258.164] GetFileType (hFile=0x238) returned 0x1 [0258.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0258.164] GetFileType (hFile=0x238) returned 0x1 [0258.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv", lpFilePart=0x0) returned 0x3a [0258.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0258.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tal_bns9nad8yaxvn.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0258.500] GetFileType (hFile=0x228) returned 0x1 [0258.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0258.501] GetFileType (hFile=0x228) returned 0x1 [0258.501] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.505] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.506] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.506] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.506] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.506] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.506] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.507] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.507] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.507] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.507] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x509, lpOverlapped=0x0) returned 1 [0258.508] ReadFile (in: hFile=0x228, lpBuffer=0x2730399, nNumberOfBytesToRead=0x2f7, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2730399*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0258.508] ReadFile (in: hFile=0x228, lpBuffer=0x27306a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27306a8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0258.508] CloseHandle (hObject=0x228) returned 1 [0258.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv", lpFilePart=0x0) returned 0x3a [0258.508] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TAl_bns9nAd8yAxvN.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tal_bns9nad8yaxvn.flv")) returned 1 [0258.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi.EnyBenied", lpFilePart=0x0) returned 0x37 [0258.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0258.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\td4-.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0258.511] GetFileType (hFile=0x238) returned 0x1 [0258.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0258.511] GetFileType (hFile=0x238) returned 0x1 [0258.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi", lpFilePart=0x0) returned 0x2d [0258.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0258.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\td4-.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0258.855] GetFileType (hFile=0x228) returned 0x1 [0258.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0258.855] GetFileType (hFile=0x228) returned 0x1 [0258.855] ReadFile (in: hFile=0x228, lpBuffer=0x2680528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2680528*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.860] ReadFile (in: hFile=0x228, lpBuffer=0x2680528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2680528*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.861] ReadFile (in: hFile=0x228, lpBuffer=0x2680528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2680528*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.861] ReadFile (in: hFile=0x228, lpBuffer=0x2680528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2680528*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.861] ReadFile (in: hFile=0x228, lpBuffer=0x2680528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2680528*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.861] ReadFile (in: hFile=0x228, lpBuffer=0x2680528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2680528*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0258.862] ReadFile (in: hFile=0x228, lpBuffer=0x2680528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2680528*, lpNumberOfBytesRead=0x1add88*=0xe7d, lpOverlapped=0x0) returned 1 [0258.862] ReadFile (in: hFile=0x228, lpBuffer=0x268038d, nNumberOfBytesToRead=0x183, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x268038d*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0258.862] ReadFile (in: hFile=0x228, lpBuffer=0x2680528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2680528*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0258.862] CloseHandle (hObject=0x228) returned 1 [0258.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi", lpFilePart=0x0) returned 0x2d [0258.862] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Td4-.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\td4-.avi")) returned 1 [0258.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi.EnyBenied", lpFilePart=0x0) returned 0x39 [0258.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0258.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uipmba.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0258.864] GetFileType (hFile=0x238) returned 0x1 [0258.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0258.865] GetFileType (hFile=0x238) returned 0x1 [0259.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi", lpFilePart=0x0) returned 0x2f [0259.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0259.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uipmba.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0259.202] GetFileType (hFile=0x228) returned 0x1 [0259.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0259.202] GetFileType (hFile=0x228) returned 0x1 [0259.202] ReadFile (in: hFile=0x228, lpBuffer=0x27ccc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27ccc20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.207] ReadFile (in: hFile=0x228, lpBuffer=0x27ccc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27ccc20*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.207] ReadFile (in: hFile=0x228, lpBuffer=0x27ccc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27ccc20*, lpNumberOfBytesRead=0x1add88*=0x3b3, lpOverlapped=0x0) returned 1 [0259.207] ReadFile (in: hFile=0x228, lpBuffer=0x27ccc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27ccc20*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0259.207] CloseHandle (hObject=0x228) returned 1 [0259.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi", lpFilePart=0x0) returned 0x2f [0259.207] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UipMbA.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uipmba.avi")) returned 1 [0259.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv.EnyBenied", lpFilePart=0x0) returned 0x38 [0259.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0259.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzzew.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0259.210] GetFileType (hFile=0x238) returned 0x1 [0259.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0259.210] GetFileType (hFile=0x238) returned 0x1 [0259.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv", lpFilePart=0x0) returned 0x2e [0259.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0259.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzzew.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0259.539] GetFileType (hFile=0x228) returned 0x1 [0259.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0259.540] GetFileType (hFile=0x228) returned 0x1 [0259.540] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.545] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.545] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.545] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.545] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.546] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.546] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.546] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.546] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.546] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.547] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.547] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.547] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.547] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.547] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.548] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.548] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x658, lpOverlapped=0x0) returned 1 [0259.548] ReadFile (in: hFile=0x228, lpBuffer=0x27144d0, nNumberOfBytesToRead=0x1a8, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27144d0*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0259.548] ReadFile (in: hFile=0x228, lpBuffer=0x2714690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2714690*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0259.548] CloseHandle (hObject=0x228) returned 1 [0259.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv", lpFilePart=0x0) returned 0x2e [0259.548] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vZzew.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzzew.flv")) returned 1 [0259.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi.EnyBenied", lpFilePart=0x0) returned 0x37 [0259.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0259.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wuwt.avi.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0259.551] GetFileType (hFile=0x238) returned 0x1 [0259.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0259.551] GetFileType (hFile=0x238) returned 0x1 [0259.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi", lpFilePart=0x0) returned 0x2d [0259.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0259.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wuwt.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0259.886] GetFileType (hFile=0x228) returned 0x1 [0259.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0259.886] GetFileType (hFile=0x228) returned 0x1 [0259.886] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.891] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.891] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.891] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.892] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.892] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.892] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.892] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.892] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.893] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.893] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.893] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.894] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.894] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.894] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.894] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.895] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0259.895] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x73e, lpOverlapped=0x0) returned 1 [0259.895] ReadFile (in: hFile=0x228, lpBuffer=0x266a7de, nNumberOfBytesToRead=0xc2, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a7de*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0259.895] ReadFile (in: hFile=0x228, lpBuffer=0x266a8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266a8b8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0259.895] CloseHandle (hObject=0x228) returned 1 [0259.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi", lpFilePart=0x0) returned 0x2d [0259.895] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\WuwT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wuwt.avi")) returned 1 [0259.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4.EnyBenied", lpFilePart=0x0) returned 0x41 [0259.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0259.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xb6c_mffcd8smm.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0259.898] GetFileType (hFile=0x238) returned 0x1 [0259.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0259.898] GetFileType (hFile=0x238) returned 0x1 [0260.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4", lpFilePart=0x0) returned 0x37 [0260.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0260.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xb6c_mffcd8smm.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0260.313] GetFileType (hFile=0x228) returned 0x1 [0260.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0260.313] GetFileType (hFile=0x228) returned 0x1 [0260.313] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.315] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.318] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.318] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.319] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.319] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.319] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.319] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.319] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.320] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.320] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.320] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.320] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.320] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.321] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.321] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.321] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.321] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.321] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.322] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x1c4, lpOverlapped=0x0) returned 1 [0260.322] ReadFile (in: hFile=0x228, lpBuffer=0x27a4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27a4978*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0260.322] CloseHandle (hObject=0x228) returned 1 [0260.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4", lpFilePart=0x0) returned 0x37 [0260.322] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Xb6c_MFfcD8SmM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xb6c_mffcd8smm.mp4")) returned 1 [0260.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4.EnyBenied", lpFilePart=0x0) returned 0x45 [0260.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0260.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xbjktadruj5ddypjxf.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0260.325] GetFileType (hFile=0x238) returned 0x1 [0260.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0260.325] GetFileType (hFile=0x238) returned 0x1 [0260.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4", lpFilePart=0x0) returned 0x3b [0260.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0260.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xbjktadruj5ddypjxf.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0260.676] GetFileType (hFile=0x228) returned 0x1 [0260.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0260.676] GetFileType (hFile=0x228) returned 0x1 [0260.676] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.681] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.681] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.682] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.682] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.682] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.682] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.683] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.683] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.683] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.684] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0260.684] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0xdc, lpOverlapped=0x0) returned 1 [0260.684] ReadFile (in: hFile=0x228, lpBuffer=0x26ff510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26ff510*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0260.684] CloseHandle (hObject=0x228) returned 1 [0260.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4", lpFilePart=0x0) returned 0x3b [0260.684] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XBjKtADruj5ddypJxf.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xbjktadruj5ddypjxf.mp4")) returned 1 [0260.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv.EnyBenied", lpFilePart=0x0) returned 0x3b [0260.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0260.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xdosyq8z.flv.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0260.687] GetFileType (hFile=0x238) returned 0x1 [0260.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0260.687] GetFileType (hFile=0x238) returned 0x1 [0261.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv", lpFilePart=0x0) returned 0x31 [0261.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0261.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xdosyq8z.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0261.082] GetFileType (hFile=0x228) returned 0x1 [0261.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0261.082] GetFileType (hFile=0x228) returned 0x1 [0261.082] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.103] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.103] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.103] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.103] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.104] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.104] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.104] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.104] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.104] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.105] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.105] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.105] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.105] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.105] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.106] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.106] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.106] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x65e, lpOverlapped=0x0) returned 1 [0261.106] ReadFile (in: hFile=0x228, lpBuffer=0x2651a56, nNumberOfBytesToRead=0x1a2, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651a56*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0261.106] ReadFile (in: hFile=0x228, lpBuffer=0x2651c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x2651c10*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0261.106] CloseHandle (hObject=0x228) returned 1 [0261.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv", lpFilePart=0x0) returned 0x31 [0261.107] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xdOsYq8z.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xdosyq8z.flv")) returned 1 [0261.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4.EnyBenied", lpFilePart=0x0) returned 0x46 [0261.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0261.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4.EnyBenied" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_mrvtzjesz3z06n t16.mp4.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0261.109] GetFileType (hFile=0x238) returned 0x1 [0261.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0261.109] GetFileType (hFile=0x238) returned 0x1 [0261.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4", lpFilePart=0x0) returned 0x3c [0261.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0261.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_mrvtzjesz3z06n t16.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0261.454] GetFileType (hFile=0x228) returned 0x1 [0261.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0261.454] GetFileType (hFile=0x228) returned 0x1 [0261.454] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.460] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.460] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.460] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.460] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.461] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.461] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0261.461] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x2d6, lpOverlapped=0x0) returned 1 [0261.461] ReadFile (in: hFile=0x228, lpBuffer=0x27aaaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x27aaaf8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0261.461] CloseHandle (hObject=0x228) returned 1 [0261.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4", lpFilePart=0x0) returned 0x3c [0261.462] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_mRVtzJeSz3z06n t16.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_mrvtzjesz3z06n t16.mp4")) returned 1 [0261.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.TXT", lpFilePart=0x0) returned 0x30 [0261.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0261.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0261.465] GetFileType (hFile=0x238) returned 0x1 [0261.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0261.465] GetFileType (hFile=0x238) returned 0x1 [0261.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png", lpFilePart=0x0) returned 0x30 [0261.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0261.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0261.466] GetFileType (hFile=0x238) returned 0x1 [0261.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0261.466] GetFileType (hFile=0x238) returned 0x1 [0261.466] WriteFile (in: hFile=0x238, lpBuffer=0x27bd600*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x27bd600*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0261.467] CloseHandle (hObject=0x238) returned 1 [0261.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5b [0261.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0261.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0261.468] GetFileType (hFile=0x238) returned 0x1 [0261.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0261.468] GetFileType (hFile=0x238) returned 0x1 [0261.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ENYBENY.TXT", lpFilePart=0x0) returned 0x29 [0261.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0261.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ENYBENY.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0261.469] GetFileType (hFile=0x238) returned 0x1 [0261.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0261.469] GetFileType (hFile=0x238) returned 0x1 [0261.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ENYBENY.png", lpFilePart=0x0) returned 0x29 [0261.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0261.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ENYBENY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0261.471] GetFileType (hFile=0x238) returned 0x1 [0261.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adca0) returned 1 [0261.471] GetFileType (hFile=0x238) returned 0x1 [0261.471] WriteFile (in: hFile=0x238, lpBuffer=0x27cf618*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1ade58, lpOverlapped=0x0 | out: lpBuffer=0x27cf618*, lpNumberOfBytesWritten=0x1ade58*=0x50df, lpOverlapped=0x0) returned 1 [0261.472] CloseHandle (hObject=0x238) returned 1 [0261.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x54 [0261.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc70) returned 1 [0261.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0261.473] GetFileType (hFile=0x238) returned 0x1 [0261.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbe0) returned 1 [0261.473] GetFileType (hFile=0x238) returned 0x1 [0261.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0261.474] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0261.474] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\", lpFilePart=0x0) returned 0x13 [0261.474] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2dfdc0 [0261.474] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.474] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.475] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.475] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.475] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.475] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.475] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.475] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.475] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.476] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.476] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.476] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.476] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.476] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.476] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.476] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.476] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.477] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0261.477] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0261.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0261.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0261.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ade30) returned 1 [0261.477] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ad920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0261.477] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\", nBufferLength=0x105, lpBuffer=0x1ad8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\", lpFilePart=0x0) returned 0x13 [0261.477] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x1adad0 | out: lpFindFileData=0x1adad0) returned 0x2dfdc0 [0261.477] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.477] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.477] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.478] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.479] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.479] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.479] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.479] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 1 [0261.479] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adb20 | out: lpFindFileData=0x1adb20) returned 0 [0261.479] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0261.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add80) returned 1 [0261.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add40) returned 1 [0261.480] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x28 [0261.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcd0) returned 1 [0261.480] CreateFileW (lpFileName="C:\\Users\\All Users\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0261.481] GetFileType (hFile=0x238) returned 0x1 [0261.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0261.481] GetFileType (hFile=0x238) returned 0x1 [0261.818] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\ENYBENY.png", lpFilePart=0x0) returned 0x1e [0261.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcd0) returned 1 [0261.818] CreateFileW (lpFileName="C:\\Users\\All Users\\ENYBENY.png" (normalized: "c:\\users\\all users\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0261.819] GetFileType (hFile=0x228) returned 0x1 [0261.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0261.819] GetFileType (hFile=0x228) returned 0x1 [0261.819] ReadFile (in: hFile=0x228, lpBuffer=0x2722360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade08, lpOverlapped=0x0 | out: lpBuffer=0x2722360*, lpNumberOfBytesRead=0x1ade08*=0x1000, lpOverlapped=0x0) returned 1 [0261.824] ReadFile (in: hFile=0x228, lpBuffer=0x2722360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade08, lpOverlapped=0x0 | out: lpBuffer=0x2722360*, lpNumberOfBytesRead=0x1ade08*=0x1000, lpOverlapped=0x0) returned 1 [0261.824] ReadFile (in: hFile=0x228, lpBuffer=0x2722360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade08, lpOverlapped=0x0 | out: lpBuffer=0x2722360*, lpNumberOfBytesRead=0x1ade08*=0x1000, lpOverlapped=0x0) returned 1 [0261.824] ReadFile (in: hFile=0x228, lpBuffer=0x2722360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade08, lpOverlapped=0x0 | out: lpBuffer=0x2722360*, lpNumberOfBytesRead=0x1ade08*=0x1000, lpOverlapped=0x0) returned 1 [0261.824] ReadFile (in: hFile=0x228, lpBuffer=0x2722360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade08, lpOverlapped=0x0 | out: lpBuffer=0x2722360*, lpNumberOfBytesRead=0x1ade08*=0x1000, lpOverlapped=0x0) returned 1 [0261.825] ReadFile (in: hFile=0x228, lpBuffer=0x2722360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade08, lpOverlapped=0x0 | out: lpBuffer=0x2722360*, lpNumberOfBytesRead=0x1ade08*=0xdf, lpOverlapped=0x0) returned 1 [0261.825] ReadFile (in: hFile=0x228, lpBuffer=0x2722360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ade08, lpOverlapped=0x0 | out: lpBuffer=0x2722360*, lpNumberOfBytesRead=0x1ade08*=0x0, lpOverlapped=0x0) returned 1 [0261.825] CloseHandle (hObject=0x228) returned 1 [0261.825] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\ENYBENY.png", lpFilePart=0x0) returned 0x1e [0261.825] DeleteFileW (lpFileName="C:\\Users\\All Users\\ENYBENY.png" (normalized: "c:\\users\\all users\\enybeny.png")) returned 1 [0261.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0261.826] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0261.826] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\", lpFilePart=0x0) returned 0x19 [0261.826] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0261.827] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.827] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.827] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.827] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.827] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.827] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.827] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0261.827] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0261.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0261.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0261.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0261.828] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0261.828] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\", lpFilePart=0x0) returned 0x19 [0261.828] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0261.828] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.828] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.828] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.828] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.828] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.828] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0261.829] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0261.829] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0261.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0261.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0261.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x2e [0261.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0261.829] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\adobe\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0261.830] GetFileType (hFile=0x238) returned 0x1 [0261.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0261.830] GetFileType (hFile=0x238) returned 0x1 [0262.179] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ENYBENY.png", lpFilePart=0x0) returned 0x24 [0262.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0262.179] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0262.180] GetFileType (hFile=0x228) returned 0x1 [0262.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0262.180] GetFileType (hFile=0x228) returned 0x1 [0262.180] ReadFile (in: hFile=0x228, lpBuffer=0x26718e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26718e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0262.186] ReadFile (in: hFile=0x228, lpBuffer=0x26718e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26718e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0262.186] ReadFile (in: hFile=0x228, lpBuffer=0x26718e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26718e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0262.186] ReadFile (in: hFile=0x228, lpBuffer=0x26718e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26718e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0262.187] ReadFile (in: hFile=0x228, lpBuffer=0x26718e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26718e8*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0262.187] ReadFile (in: hFile=0x228, lpBuffer=0x26718e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26718e8*, lpNumberOfBytesRead=0x1add88*=0xdf, lpOverlapped=0x0) returned 1 [0262.187] ReadFile (in: hFile=0x228, lpBuffer=0x26718e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x26718e8*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0262.187] CloseHandle (hObject=0x228) returned 1 [0262.188] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ENYBENY.png", lpFilePart=0x0) returned 0x24 [0262.188] DeleteFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\enybeny.png")) returned 1 [0262.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0262.192] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x20 [0262.192] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x21 [0262.192] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0262.192] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.193] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.193] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.193] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.193] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.193] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0262.193] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0262.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0262.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0262.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0262.193] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x20 [0262.193] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x21 [0262.193] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0262.194] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.194] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.194] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.194] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.194] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0262.194] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0262.194] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0262.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0262.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0262.195] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x36 [0262.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0262.195] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\adobe\\acrobat\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0262.207] GetFileType (hFile=0x238) returned 0x1 [0262.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0262.207] GetFileType (hFile=0x238) returned 0x1 [0262.553] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png", lpFilePart=0x0) returned 0x2c [0262.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0262.553] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0262.554] GetFileType (hFile=0x228) returned 0x1 [0262.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0262.554] GetFileType (hFile=0x228) returned 0x1 [0262.554] ReadFile (in: hFile=0x228, lpBuffer=0x27c0e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27c0e20*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0262.559] ReadFile (in: hFile=0x228, lpBuffer=0x27c0e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27c0e20*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0262.560] ReadFile (in: hFile=0x228, lpBuffer=0x27c0e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27c0e20*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0262.560] ReadFile (in: hFile=0x228, lpBuffer=0x27c0e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27c0e20*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0262.560] ReadFile (in: hFile=0x228, lpBuffer=0x27c0e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27c0e20*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0262.561] ReadFile (in: hFile=0x228, lpBuffer=0x27c0e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27c0e20*, lpNumberOfBytesRead=0x1add08*=0xdf, lpOverlapped=0x0) returned 1 [0262.561] ReadFile (in: hFile=0x228, lpBuffer=0x27c0e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27c0e20*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0262.561] CloseHandle (hObject=0x228) returned 1 [0262.561] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png", lpFilePart=0x0) returned 0x2c [0262.561] DeleteFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\enybeny.png")) returned 1 [0262.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0262.563] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x25 [0262.563] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x26 [0262.563] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0262.563] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.563] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.563] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.563] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.563] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.564] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0262.564] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0262.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0262.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0262.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0262.564] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x25 [0262.564] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x26 [0262.564] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0262.564] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.564] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.564] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.564] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.565] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0262.565] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0262.565] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0262.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0262.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0262.569] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x3b [0262.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0262.569] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0262.570] GetFileType (hFile=0x238) returned 0x1 [0262.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0262.570] GetFileType (hFile=0x238) returned 0x1 [0262.919] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0262.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0262.919] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0262.920] GetFileType (hFile=0x228) returned 0x1 [0262.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0262.920] GetFileType (hFile=0x228) returned 0x1 [0262.920] ReadFile (in: hFile=0x228, lpBuffer=0x2710690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2710690*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0262.924] ReadFile (in: hFile=0x228, lpBuffer=0x2710690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2710690*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0262.925] ReadFile (in: hFile=0x228, lpBuffer=0x2710690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2710690*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0262.925] ReadFile (in: hFile=0x228, lpBuffer=0x2710690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2710690*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0262.925] ReadFile (in: hFile=0x228, lpBuffer=0x2710690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2710690*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0262.925] ReadFile (in: hFile=0x228, lpBuffer=0x2710690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2710690*, lpNumberOfBytesRead=0x1adc88*=0xdf, lpOverlapped=0x0) returned 1 [0262.926] ReadFile (in: hFile=0x228, lpBuffer=0x2710690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2710690*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0262.926] CloseHandle (hObject=0x228) returned 1 [0262.926] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0262.926] DeleteFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\enybeny.png")) returned 1 [0262.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0262.927] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2f [0262.927] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x30 [0262.927] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0262.928] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.928] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.928] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.928] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.928] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.928] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0262.928] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0262.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0262.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0262.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0262.928] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2f [0262.929] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x30 [0262.929] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0262.929] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.929] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.929] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.929] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.929] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0262.929] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0262.929] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0262.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0262.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0262.930] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x45 [0262.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0262.930] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0262.931] GetFileType (hFile=0x238) returned 0x1 [0262.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0262.931] GetFileType (hFile=0x238) returned 0x1 [0263.276] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png", lpFilePart=0x0) returned 0x3b [0263.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0263.276] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0263.277] GetFileType (hFile=0x228) returned 0x1 [0263.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0263.277] GetFileType (hFile=0x228) returned 0x1 [0263.277] ReadFile (in: hFile=0x228, lpBuffer=0x2660288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2660288*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0263.282] ReadFile (in: hFile=0x228, lpBuffer=0x2660288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2660288*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0263.282] ReadFile (in: hFile=0x228, lpBuffer=0x2660288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2660288*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0263.282] ReadFile (in: hFile=0x228, lpBuffer=0x2660288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2660288*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0263.283] ReadFile (in: hFile=0x228, lpBuffer=0x2660288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2660288*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0263.283] ReadFile (in: hFile=0x228, lpBuffer=0x2660288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2660288*, lpNumberOfBytesRead=0x1adc08*=0xdf, lpOverlapped=0x0) returned 1 [0263.283] ReadFile (in: hFile=0x228, lpBuffer=0x2660288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x2660288*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0263.283] CloseHandle (hObject=0x228) returned 1 [0263.283] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png", lpFilePart=0x0) returned 0x3b [0263.283] DeleteFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\enybeny.png")) returned 1 [0263.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0263.291] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x38 [0263.291] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x39 [0263.291] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0263.291] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.292] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.292] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.292] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.292] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.292] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0263.292] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0263.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0263.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0263.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0263.292] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x38 [0263.292] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x39 [0263.292] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0263.293] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.293] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.293] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.293] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.293] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0263.293] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0263.293] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0263.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0263.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0263.294] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x4e [0263.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0263.294] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0263.295] GetFileType (hFile=0x238) returned 0x1 [0263.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0263.295] GetFileType (hFile=0x238) returned 0x1 [0263.624] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0263.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0263.624] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0263.625] GetFileType (hFile=0x228) returned 0x1 [0263.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0263.625] GetFileType (hFile=0x228) returned 0x1 [0263.625] ReadFile (in: hFile=0x228, lpBuffer=0x27b0268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27b0268*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0263.630] ReadFile (in: hFile=0x228, lpBuffer=0x27b0268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27b0268*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0263.630] ReadFile (in: hFile=0x228, lpBuffer=0x27b0268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27b0268*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0263.630] ReadFile (in: hFile=0x228, lpBuffer=0x27b0268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27b0268*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0263.631] ReadFile (in: hFile=0x228, lpBuffer=0x27b0268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27b0268*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0263.631] ReadFile (in: hFile=0x228, lpBuffer=0x27b0268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27b0268*, lpNumberOfBytesRead=0x1adb88*=0xdf, lpOverlapped=0x0) returned 1 [0263.631] ReadFile (in: hFile=0x228, lpBuffer=0x27b0268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27b0268*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0263.631] CloseHandle (hObject=0x228) returned 1 [0263.631] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0263.631] DeleteFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\enybeny.png")) returned 1 [0263.635] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.TXT", lpFilePart=0x0) returned 0x44 [0263.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0263.635] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0263.635] GetFileType (hFile=0x238) returned 0x1 [0263.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0263.635] GetFileType (hFile=0x238) returned 0x1 [0263.636] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0263.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0263.636] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0263.636] GetFileType (hFile=0x238) returned 0x1 [0263.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0263.636] GetFileType (hFile=0x238) returned 0x1 [0263.636] WriteFile (in: hFile=0x238, lpBuffer=0x27c0b90*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x27c0b90*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0263.637] CloseHandle (hObject=0x238) returned 1 [0263.638] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6f [0263.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0263.638] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0263.638] GetFileType (hFile=0x238) returned 0x1 [0263.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0263.638] GetFileType (hFile=0x238) returned 0x1 [0263.639] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3b [0263.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0263.639] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0263.639] GetFileType (hFile=0x238) returned 0x1 [0263.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0263.639] GetFileType (hFile=0x238) returned 0x1 [0263.640] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png", lpFilePart=0x0) returned 0x3b [0263.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0263.640] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0263.641] GetFileType (hFile=0x238) returned 0x1 [0263.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0263.641] GetFileType (hFile=0x238) returned 0x1 [0263.641] WriteFile (in: hFile=0x238, lpBuffer=0x27d2c80*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x27d2c80*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0263.642] CloseHandle (hObject=0x238) returned 1 [0263.642] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x66 [0263.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0263.642] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0263.642] GetFileType (hFile=0x238) returned 0x1 [0263.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0263.642] GetFileType (hFile=0x238) returned 0x1 [0263.643] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x31 [0263.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0263.643] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0263.644] GetFileType (hFile=0x238) returned 0x1 [0263.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0263.644] GetFileType (hFile=0x238) returned 0x1 [0263.645] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png", lpFilePart=0x0) returned 0x31 [0263.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0263.645] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0263.645] GetFileType (hFile=0x238) returned 0x1 [0263.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0263.645] GetFileType (hFile=0x238) returned 0x1 [0263.645] WriteFile (in: hFile=0x238, lpBuffer=0x27e4d08*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x27e4d08*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0263.646] CloseHandle (hObject=0x238) returned 1 [0263.646] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5c [0263.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0263.646] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0263.647] GetFileType (hFile=0x238) returned 0x1 [0263.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0263.647] GetFileType (hFile=0x238) returned 0x1 [0263.647] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2c [0263.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0263.648] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\adobe\\acrobat\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0263.648] GetFileType (hFile=0x238) returned 0x1 [0263.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0263.648] GetFileType (hFile=0x238) returned 0x1 [0263.649] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png", lpFilePart=0x0) returned 0x2c [0263.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0263.649] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\acrobat\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0263.649] GetFileType (hFile=0x238) returned 0x1 [0263.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0263.649] GetFileType (hFile=0x238) returned 0x1 [0263.649] WriteFile (in: hFile=0x238, lpBuffer=0x27f6d48*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x27f6d48*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0263.650] CloseHandle (hObject=0x238) returned 1 [0263.650] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x57 [0263.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0263.650] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\adobe\\acrobat\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0263.650] GetFileType (hFile=0x238) returned 0x1 [0263.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0263.651] GetFileType (hFile=0x238) returned 0x1 [0263.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0263.651] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0263.651] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x1d [0263.651] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0263.652] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.652] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.652] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.652] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.652] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.652] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0263.652] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0263.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0263.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0263.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0263.652] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0263.652] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x1d [0263.653] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0263.653] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.653] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.653] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.653] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.653] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0263.653] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0263.653] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0263.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0263.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0263.654] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x32 [0263.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0263.657] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\adobe\\arm\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0263.657] GetFileType (hFile=0x238) returned 0x1 [0263.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0263.657] GetFileType (hFile=0x238) returned 0x1 [0264.011] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0264.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0264.012] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\arm\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0264.012] GetFileType (hFile=0x228) returned 0x1 [0264.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0264.012] GetFileType (hFile=0x228) returned 0x1 [0264.012] ReadFile (in: hFile=0x228, lpBuffer=0x2747988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2747988*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0264.018] ReadFile (in: hFile=0x228, lpBuffer=0x2747988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2747988*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0264.018] ReadFile (in: hFile=0x228, lpBuffer=0x2747988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2747988*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0264.018] ReadFile (in: hFile=0x228, lpBuffer=0x2747988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2747988*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0264.019] ReadFile (in: hFile=0x228, lpBuffer=0x2747988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2747988*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0264.019] ReadFile (in: hFile=0x228, lpBuffer=0x2747988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2747988*, lpNumberOfBytesRead=0x1add08*=0xdf, lpOverlapped=0x0) returned 1 [0264.019] ReadFile (in: hFile=0x228, lpBuffer=0x2747988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x2747988*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0264.019] CloseHandle (hObject=0x228) returned 1 [0264.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0264.019] DeleteFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\arm\\enybeny.png")) returned 1 [0264.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0264.021] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x2a [0264.021] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x2b [0264.021] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0264.021] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.021] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.021] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.021] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.021] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.021] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.022] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.022] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0264.022] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0264.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0264.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0264.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0264.022] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x2a [0264.022] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x2b [0264.022] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0264.022] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.022] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.022] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.023] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.023] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.023] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.023] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0264.023] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0264.023] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0264.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0264.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0264.024] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x40 [0264.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0264.024] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.024] GetFileType (hFile=0x238) returned 0x1 [0264.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0264.025] GetFileType (hFile=0x238) returned 0x1 [0264.358] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png", lpFilePart=0x0) returned 0x36 [0264.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0264.359] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0264.359] GetFileType (hFile=0x228) returned 0x1 [0264.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0264.359] GetFileType (hFile=0x228) returned 0x1 [0264.359] ReadFile (in: hFile=0x228, lpBuffer=0x2697f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2697f00*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0264.364] ReadFile (in: hFile=0x228, lpBuffer=0x2697f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2697f00*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0264.365] ReadFile (in: hFile=0x228, lpBuffer=0x2697f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2697f00*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0264.365] ReadFile (in: hFile=0x228, lpBuffer=0x2697f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2697f00*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0264.365] ReadFile (in: hFile=0x228, lpBuffer=0x2697f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2697f00*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0264.365] ReadFile (in: hFile=0x228, lpBuffer=0x2697f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2697f00*, lpNumberOfBytesRead=0x1adc88*=0xdf, lpOverlapped=0x0) returned 1 [0264.365] ReadFile (in: hFile=0x228, lpBuffer=0x2697f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x2697f00*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0264.365] CloseHandle (hObject=0x228) returned 1 [0264.366] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png", lpFilePart=0x0) returned 0x36 [0264.366] DeleteFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\enybeny.png")) returned 1 [0264.369] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x36 [0264.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0264.369] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.369] GetFileType (hFile=0x238) returned 0x1 [0264.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0264.369] GetFileType (hFile=0x238) returned 0x1 [0264.370] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png", lpFilePart=0x0) returned 0x36 [0264.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0264.370] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.371] GetFileType (hFile=0x238) returned 0x1 [0264.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0264.371] GetFileType (hFile=0x238) returned 0x1 [0264.371] WriteFile (in: hFile=0x238, lpBuffer=0x26a87a8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x26a87a8*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0264.372] CloseHandle (hObject=0x238) returned 1 [0264.372] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x61 [0264.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0264.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.372] GetFileType (hFile=0x238) returned 0x1 [0264.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0264.372] GetFileType (hFile=0x238) returned 0x1 [0264.373] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.TXT", lpFilePart=0x0) returned 0x28 [0264.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0264.373] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\adobe\\arm\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.373] GetFileType (hFile=0x238) returned 0x1 [0264.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0264.374] GetFileType (hFile=0x238) returned 0x1 [0264.374] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0264.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0264.374] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\arm\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.375] GetFileType (hFile=0x238) returned 0x1 [0264.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0264.375] GetFileType (hFile=0x238) returned 0x1 [0264.375] WriteFile (in: hFile=0x238, lpBuffer=0x26ba7e8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x26ba7e8*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0264.377] CloseHandle (hObject=0x238) returned 1 [0264.377] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x53 [0264.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0264.377] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\adobe\\arm\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.377] GetFileType (hFile=0x238) returned 0x1 [0264.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0264.377] GetFileType (hFile=0x238) returned 0x1 [0264.378] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ENYBENY.TXT", lpFilePart=0x0) returned 0x24 [0264.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.378] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\adobe\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.378] GetFileType (hFile=0x238) returned 0x1 [0264.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.379] GetFileType (hFile=0x238) returned 0x1 [0264.379] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ENYBENY.png", lpFilePart=0x0) returned 0x24 [0264.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0264.379] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ENYBENY.png" (normalized: "c:\\users\\all users\\adobe\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.380] GetFileType (hFile=0x238) returned 0x1 [0264.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0264.380] GetFileType (hFile=0x238) returned 0x1 [0264.380] WriteFile (in: hFile=0x238, lpBuffer=0x26cc7b8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26cc7b8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0264.381] CloseHandle (hObject=0x238) returned 1 [0264.381] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x4f [0264.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.381] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\adobe\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.381] GetFileType (hFile=0x238) returned 0x1 [0264.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.381] GetFileType (hFile=0x238) returned 0x1 [0264.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0264.382] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data", lpFilePart=0x0) returned 0x23 [0264.382] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\", lpFilePart=0x0) returned 0x24 [0264.382] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0264.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0264.386] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\ENYBENY.TXT", lpFilePart=0x0) returned 0x2f [0264.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.386] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\application data\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.387] GetFileType (hFile=0x238) returned 0x1 [0264.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.387] GetFileType (hFile=0x238) returned 0x1 [0264.387] WriteFile (in: hFile=0x238, lpBuffer=0x26de9f8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26de9f8*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0264.388] CloseHandle (hObject=0x238) returned 1 [0264.388] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0264.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0264.388] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data\\ENYBENY.png" (normalized: "c:\\users\\all users\\application data\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.389] GetFileType (hFile=0x238) returned 0x1 [0264.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0264.389] GetFileType (hFile=0x238) returned 0x1 [0264.389] WriteFile (in: hFile=0x238, lpBuffer=0x26dfa88*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26dfa88*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0264.390] CloseHandle (hObject=0x238) returned 1 [0264.390] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5a [0264.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.391] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\application data\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.391] GetFileType (hFile=0x238) returned 0x1 [0264.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.391] GetFileType (hFile=0x238) returned 0x1 [0264.391] WriteFile (in: hFile=0x238, lpBuffer=0x26e6658*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26e6658*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0264.392] CloseHandle (hObject=0x238) returned 1 [0264.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0264.392] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop", lpFilePart=0x0) returned 0x1a [0264.392] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\", lpFilePart=0x0) returned 0x1b [0264.392] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0264.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0264.396] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\ENYBENY.TXT", lpFilePart=0x0) returned 0x26 [0264.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\desktop\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.396] GetFileType (hFile=0x238) returned 0x1 [0264.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.396] GetFileType (hFile=0x238) returned 0x1 [0264.397] WriteFile (in: hFile=0x238, lpBuffer=0x26f1c38*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26f1c38*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0264.398] CloseHandle (hObject=0x238) returned 1 [0264.398] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\ENYBENY.png", lpFilePart=0x0) returned 0x26 [0264.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0264.398] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop\\ENYBENY.png" (normalized: "c:\\users\\all users\\desktop\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.398] GetFileType (hFile=0x238) returned 0x1 [0264.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0264.398] GetFileType (hFile=0x238) returned 0x1 [0264.399] WriteFile (in: hFile=0x238, lpBuffer=0x26f2cb8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x26f2cb8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0264.400] CloseHandle (hObject=0x238) returned 1 [0264.400] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x51 [0264.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.400] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\desktop\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.400] GetFileType (hFile=0x238) returned 0x1 [0264.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.400] GetFileType (hFile=0x238) returned 0x1 [0264.400] WriteFile (in: hFile=0x238, lpBuffer=0x26f9858*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x26f9858*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0264.401] CloseHandle (hObject=0x238) returned 1 [0264.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0264.401] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents", lpFilePart=0x0) returned 0x1c [0264.402] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\", lpFilePart=0x0) returned 0x1d [0264.402] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0264.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0264.405] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\ENYBENY.TXT", lpFilePart=0x0) returned 0x28 [0264.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.405] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\documents\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.406] GetFileType (hFile=0x238) returned 0x1 [0264.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.406] GetFileType (hFile=0x238) returned 0x1 [0264.406] WriteFile (in: hFile=0x238, lpBuffer=0x2704e70*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x2704e70*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0264.407] CloseHandle (hObject=0x238) returned 1 [0264.407] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0264.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0264.407] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents\\ENYBENY.png" (normalized: "c:\\users\\all users\\documents\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.408] GetFileType (hFile=0x238) returned 0x1 [0264.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0264.408] GetFileType (hFile=0x238) returned 0x1 [0264.408] WriteFile (in: hFile=0x238, lpBuffer=0x2705ef8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2705ef8*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0264.409] CloseHandle (hObject=0x238) returned 1 [0264.409] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x53 [0264.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.409] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\documents\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.409] GetFileType (hFile=0x238) returned 0x1 [0264.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.409] GetFileType (hFile=0x238) returned 0x1 [0264.409] WriteFile (in: hFile=0x238, lpBuffer=0x270caa0*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x270caa0*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0264.410] CloseHandle (hObject=0x238) returned 1 [0264.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0264.410] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites", lpFilePart=0x0) returned 0x1c [0264.410] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites\\", lpFilePart=0x0) returned 0x1d [0264.410] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0xffffffffffffffff [0264.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adce0) returned 1 [0264.414] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites\\ENYBENY.TXT", lpFilePart=0x0) returned 0x28 [0264.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.414] CreateFileW (lpFileName="C:\\Users\\All Users\\Favorites\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\favorites\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.414] GetFileType (hFile=0x238) returned 0x1 [0264.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.414] GetFileType (hFile=0x238) returned 0x1 [0264.415] WriteFile (in: hFile=0x238, lpBuffer=0x27180b8*, nNumberOfBytesToWrite=0x394, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x27180b8*, lpNumberOfBytesWritten=0x1adc98*=0x394, lpOverlapped=0x0) returned 1 [0264.416] CloseHandle (hObject=0x238) returned 1 [0264.416] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0264.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0264.416] CreateFileW (lpFileName="C:\\Users\\All Users\\Favorites\\ENYBENY.png" (normalized: "c:\\users\\all users\\favorites\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.416] GetFileType (hFile=0x238) returned 0x1 [0264.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc20) returned 1 [0264.416] GetFileType (hFile=0x238) returned 0x1 [0264.416] WriteFile (in: hFile=0x238, lpBuffer=0x2719140*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1addd8, lpOverlapped=0x0 | out: lpBuffer=0x2719140*, lpNumberOfBytesWritten=0x1addd8*=0x50df, lpOverlapped=0x0) returned 1 [0264.417] CloseHandle (hObject=0x238) returned 1 [0264.418] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x53 [0264.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbf0) returned 1 [0264.418] CreateFileW (lpFileName="C:\\Users\\All Users\\Favorites\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\favorites\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0264.418] GetFileType (hFile=0x238) returned 0x1 [0264.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb60) returned 1 [0264.418] GetFileType (hFile=0x238) returned 0x1 [0264.418] WriteFile (in: hFile=0x238, lpBuffer=0x271fce8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1adc98, lpOverlapped=0x0 | out: lpBuffer=0x271fce8*, lpNumberOfBytesWritten=0x1adc98*=0xc6, lpOverlapped=0x0) returned 1 [0264.419] CloseHandle (hObject=0x238) returned 1 [0264.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0264.419] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0264.419] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\", lpFilePart=0x0) returned 0x1d [0264.419] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0264.419] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.420] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.420] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.420] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.420] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.420] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.420] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.421] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.422] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.422] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.422] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.422] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.422] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.422] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.422] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.422] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.423] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.423] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.423] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.423] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.423] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0264.423] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0264.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0264.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0264.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1addb0) returned 1 [0264.423] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x1ad8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0264.423] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x1ad840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\", lpFilePart=0x0) returned 0x1d [0264.423] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x1ada50 | out: lpFindFileData=0x1ada50) returned 0x2dfdc0 [0264.424] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.424] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.424] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.424] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.424] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.424] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.424] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.425] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.425] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.425] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.425] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.425] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.425] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.425] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.426] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.426] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.426] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.426] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.426] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.426] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.426] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.427] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.427] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.427] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.427] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.427] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.427] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.427] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 1 [0264.427] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1adaa0 | out: lpFindFileData=0x1adaa0) returned 0 [0264.427] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0264.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1add00) returned 1 [0264.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adcc0) returned 1 [0264.428] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x32 [0264.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0264.428] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\microsoft\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.429] GetFileType (hFile=0x238) returned 0x1 [0264.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0264.429] GetFileType (hFile=0x238) returned 0x1 [0264.784] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0264.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc50) returned 1 [0264.784] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0264.784] GetFileType (hFile=0x228) returned 0x1 [0264.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0264.784] GetFileType (hFile=0x228) returned 0x1 [0264.784] ReadFile (in: hFile=0x228, lpBuffer=0x266eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266eb38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0264.791] ReadFile (in: hFile=0x228, lpBuffer=0x266eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266eb38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0264.791] ReadFile (in: hFile=0x228, lpBuffer=0x266eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266eb38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0264.791] ReadFile (in: hFile=0x228, lpBuffer=0x266eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266eb38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0264.792] ReadFile (in: hFile=0x228, lpBuffer=0x266eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266eb38*, lpNumberOfBytesRead=0x1add88*=0x1000, lpOverlapped=0x0) returned 1 [0264.792] ReadFile (in: hFile=0x228, lpBuffer=0x266eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266eb38*, lpNumberOfBytesRead=0x1add88*=0xdf, lpOverlapped=0x0) returned 1 [0264.792] ReadFile (in: hFile=0x228, lpBuffer=0x266eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add88, lpOverlapped=0x0 | out: lpBuffer=0x266eb38*, lpNumberOfBytesRead=0x1add88*=0x0, lpOverlapped=0x0) returned 1 [0264.792] CloseHandle (hObject=0x228) returned 1 [0264.792] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ENYBENY.png", lpFilePart=0x0) returned 0x28 [0264.792] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\enybeny.png")) returned 1 [0264.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0264.794] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x27 [0264.794] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x28 [0264.794] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0264.794] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.795] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.795] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.795] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.795] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.795] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0264.795] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0264.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0264.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0264.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0264.795] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x27 [0264.795] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x28 [0264.796] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0264.796] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.796] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.796] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.796] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.796] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0264.797] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0264.797] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0264.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0264.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0264.798] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x3d [0264.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0264.798] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\microsoft\\assistance\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0264.798] GetFileType (hFile=0x238) returned 0x1 [0264.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0264.798] GetFileType (hFile=0x238) returned 0x1 [0265.121] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png", lpFilePart=0x0) returned 0x33 [0265.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0265.121] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0265.122] GetFileType (hFile=0x228) returned 0x1 [0265.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0265.122] GetFileType (hFile=0x228) returned 0x1 [0265.122] ReadFile (in: hFile=0x228, lpBuffer=0x27bdf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27bdf60*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0265.127] ReadFile (in: hFile=0x228, lpBuffer=0x27bdf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27bdf60*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0265.127] ReadFile (in: hFile=0x228, lpBuffer=0x27bdf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27bdf60*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0265.127] ReadFile (in: hFile=0x228, lpBuffer=0x27bdf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27bdf60*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0265.127] ReadFile (in: hFile=0x228, lpBuffer=0x27bdf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27bdf60*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0265.128] ReadFile (in: hFile=0x228, lpBuffer=0x27bdf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27bdf60*, lpNumberOfBytesRead=0x1add08*=0xdf, lpOverlapped=0x0) returned 1 [0265.128] ReadFile (in: hFile=0x228, lpBuffer=0x27bdf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x27bdf60*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0265.128] CloseHandle (hObject=0x228) returned 1 [0265.128] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png", lpFilePart=0x0) returned 0x33 [0265.128] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\enybeny.png")) returned 1 [0265.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0265.130] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2e [0265.130] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2f [0265.130] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0265.130] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.130] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.130] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.130] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.130] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.130] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0265.131] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0265.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0265.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0265.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0265.131] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2e [0265.131] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2f [0265.131] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0265.131] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.131] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.131] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.131] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.132] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0265.132] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0265.132] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0265.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0265.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0265.133] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x44 [0265.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0265.133] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0265.155] GetFileType (hFile=0x238) returned 0x1 [0265.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0265.155] GetFileType (hFile=0x238) returned 0x1 [0265.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png", lpFilePart=0x0) returned 0x3a [0265.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0265.529] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0265.529] GetFileType (hFile=0x228) returned 0x1 [0265.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0265.529] GetFileType (hFile=0x228) returned 0x1 [0265.529] ReadFile (in: hFile=0x228, lpBuffer=0x270d458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270d458*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0265.534] ReadFile (in: hFile=0x228, lpBuffer=0x270d458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270d458*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0265.535] ReadFile (in: hFile=0x228, lpBuffer=0x270d458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270d458*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0265.535] ReadFile (in: hFile=0x228, lpBuffer=0x270d458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270d458*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0265.535] ReadFile (in: hFile=0x228, lpBuffer=0x270d458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270d458*, lpNumberOfBytesRead=0x1adc88*=0x1000, lpOverlapped=0x0) returned 1 [0265.535] ReadFile (in: hFile=0x228, lpBuffer=0x270d458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270d458*, lpNumberOfBytesRead=0x1adc88*=0xdf, lpOverlapped=0x0) returned 1 [0265.535] ReadFile (in: hFile=0x228, lpBuffer=0x270d458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc88, lpOverlapped=0x0 | out: lpBuffer=0x270d458*, lpNumberOfBytesRead=0x1adc88*=0x0, lpOverlapped=0x0) returned 1 [0265.535] CloseHandle (hObject=0x228) returned 1 [0265.536] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png", lpFilePart=0x0) returned 0x3a [0265.536] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\enybeny.png")) returned 1 [0265.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0265.537] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x32 [0265.537] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x33 [0265.537] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0265.537] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.538] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.538] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.538] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.538] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.538] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0265.538] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0265.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0265.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0265.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0265.538] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x1ad720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x32 [0265.538] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x1ad6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x33 [0265.538] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x1ad8d0 | out: lpFindFileData=0x1ad8d0) returned 0x2dfdc0 [0265.539] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.539] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.539] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.539] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.539] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 1 [0265.539] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad920 | out: lpFindFileData=0x1ad920) returned 0 [0265.539] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0265.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb80) returned 1 [0265.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0265.540] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x48 [0265.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0265.540] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0265.630] GetFileType (hFile=0x238) returned 0x1 [0265.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0265.631] GetFileType (hFile=0x238) returned 0x1 [0265.984] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png", lpFilePart=0x0) returned 0x3e [0265.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adad0) returned 1 [0265.984] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0265.984] GetFileType (hFile=0x228) returned 0x1 [0265.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada40) returned 1 [0265.984] GetFileType (hFile=0x228) returned 0x1 [0265.984] ReadFile (in: hFile=0x228, lpBuffer=0x265aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265aca0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0265.989] ReadFile (in: hFile=0x228, lpBuffer=0x265aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265aca0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0265.990] ReadFile (in: hFile=0x228, lpBuffer=0x265aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265aca0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0265.990] ReadFile (in: hFile=0x228, lpBuffer=0x265aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265aca0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0265.990] ReadFile (in: hFile=0x228, lpBuffer=0x265aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265aca0*, lpNumberOfBytesRead=0x1adc08*=0x1000, lpOverlapped=0x0) returned 1 [0265.990] ReadFile (in: hFile=0x228, lpBuffer=0x265aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265aca0*, lpNumberOfBytesRead=0x1adc08*=0xdf, lpOverlapped=0x0) returned 1 [0265.990] ReadFile (in: hFile=0x228, lpBuffer=0x265aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adc08, lpOverlapped=0x0 | out: lpBuffer=0x265aca0*, lpNumberOfBytesRead=0x1adc08*=0x0, lpOverlapped=0x0) returned 1 [0265.990] CloseHandle (hObject=0x228) returned 1 [0265.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png", lpFilePart=0x0) returned 0x3e [0265.991] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\enybeny.png")) returned 1 [0265.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0265.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x38 [0265.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x39 [0265.992] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0265.992] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.993] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.994] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.994] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0265.994] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0265.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0265.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0265.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0265.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x1ad6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x38 [0265.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x1ad640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x39 [0265.994] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x1ad850 | out: lpFindFileData=0x1ad850) returned 0x2dfdc0 [0265.994] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.994] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.994] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.995] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.995] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.995] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.995] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.995] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.995] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.995] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.995] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 1 [0265.996] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad8a0 | out: lpFindFileData=0x1ad8a0) returned 0 [0265.996] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0265.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb00) returned 1 [0265.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0265.996] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x4e [0265.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0265.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0265.997] GetFileType (hFile=0x238) returned 0x1 [0265.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0265.997] GetFileType (hFile=0x238) returned 0x1 [0266.326] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0266.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada50) returned 1 [0266.326] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0266.327] GetFileType (hFile=0x228) returned 0x1 [0266.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9c0) returned 1 [0266.327] GetFileType (hFile=0x228) returned 0x1 [0266.327] ReadFile (in: hFile=0x228, lpBuffer=0x27aa9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27aa9c0*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0266.332] ReadFile (in: hFile=0x228, lpBuffer=0x27aa9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27aa9c0*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0266.332] ReadFile (in: hFile=0x228, lpBuffer=0x27aa9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27aa9c0*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0266.332] ReadFile (in: hFile=0x228, lpBuffer=0x27aa9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27aa9c0*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0266.332] ReadFile (in: hFile=0x228, lpBuffer=0x27aa9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27aa9c0*, lpNumberOfBytesRead=0x1adb88*=0x1000, lpOverlapped=0x0) returned 1 [0266.333] ReadFile (in: hFile=0x228, lpBuffer=0x27aa9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27aa9c0*, lpNumberOfBytesRead=0x1adb88*=0xdf, lpOverlapped=0x0) returned 1 [0266.333] ReadFile (in: hFile=0x228, lpBuffer=0x27aa9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1adb88, lpOverlapped=0x0 | out: lpBuffer=0x27aa9c0*, lpNumberOfBytesRead=0x1adb88*=0x0, lpOverlapped=0x0) returned 1 [0266.333] CloseHandle (hObject=0x228) returned 1 [0266.333] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0266.333] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\enybeny.png")) returned 1 [0266.337] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.TXT", lpFilePart=0x0) returned 0x44 [0266.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0266.337] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0266.338] GetFileType (hFile=0x238) returned 0x1 [0266.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0266.338] GetFileType (hFile=0x238) returned 0x1 [0266.339] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png", lpFilePart=0x0) returned 0x44 [0266.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adab0) returned 1 [0266.339] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0266.339] GetFileType (hFile=0x238) returned 0x1 [0266.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada20) returned 1 [0266.339] GetFileType (hFile=0x238) returned 0x1 [0266.340] WriteFile (in: hFile=0x238, lpBuffer=0x27bb400*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adbd8, lpOverlapped=0x0 | out: lpBuffer=0x27bb400*, lpNumberOfBytesWritten=0x1adbd8*=0x50df, lpOverlapped=0x0) returned 1 [0266.341] CloseHandle (hObject=0x238) returned 1 [0266.341] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x6f [0266.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ad9f0) returned 1 [0266.341] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0266.342] GetFileType (hFile=0x238) returned 0x1 [0266.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad960) returned 1 [0266.342] GetFileType (hFile=0x238) returned 0x1 [0266.343] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3e [0266.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0266.343] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0266.343] GetFileType (hFile=0x238) returned 0x1 [0266.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0266.343] GetFileType (hFile=0x238) returned 0x1 [0266.344] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png", lpFilePart=0x0) returned 0x3e [0266.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb30) returned 1 [0266.344] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0266.345] GetFileType (hFile=0x238) returned 0x1 [0266.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adaa0) returned 1 [0266.345] GetFileType (hFile=0x238) returned 0x1 [0266.345] WriteFile (in: hFile=0x238, lpBuffer=0x27cd508*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adc58, lpOverlapped=0x0 | out: lpBuffer=0x27cd508*, lpNumberOfBytesWritten=0x1adc58*=0x50df, lpOverlapped=0x0) returned 1 [0266.346] CloseHandle (hObject=0x238) returned 1 [0266.346] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x69 [0266.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ada70) returned 1 [0266.346] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0266.347] GetFileType (hFile=0x238) returned 0x1 [0266.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ad9e0) returned 1 [0266.347] GetFileType (hFile=0x238) returned 0x1 [0266.348] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.TXT", lpFilePart=0x0) returned 0x3a [0266.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0266.348] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0266.348] GetFileType (hFile=0x238) returned 0x1 [0266.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0266.348] GetFileType (hFile=0x238) returned 0x1 [0266.349] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png", lpFilePart=0x0) returned 0x3a [0266.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbb0) returned 1 [0266.349] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0266.350] GetFileType (hFile=0x238) returned 0x1 [0266.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb20) returned 1 [0266.350] GetFileType (hFile=0x238) returned 0x1 [0266.350] WriteFile (in: hFile=0x238, lpBuffer=0x27df5d8*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1adcd8, lpOverlapped=0x0 | out: lpBuffer=0x27df5d8*, lpNumberOfBytesWritten=0x1adcd8*=0x50df, lpOverlapped=0x0) returned 1 [0266.351] CloseHandle (hObject=0x238) returned 1 [0266.351] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x65 [0266.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adaf0) returned 1 [0266.351] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0266.352] GetFileType (hFile=0x238) returned 0x1 [0266.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ada60) returned 1 [0266.352] GetFileType (hFile=0x238) returned 0x1 [0266.353] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.TXT", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.TXT", lpFilePart=0x0) returned 0x33 [0266.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0266.353] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.TXT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\enybeny.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0266.353] GetFileType (hFile=0x238) returned 0x1 [0266.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0266.353] GetFileType (hFile=0x238) returned 0x1 [0266.354] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png", lpFilePart=0x0) returned 0x33 [0266.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adc30) returned 1 [0266.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\assistance\\enybeny.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0266.355] GetFileType (hFile=0x238) returned 0x1 [0266.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adba0) returned 1 [0266.355] GetFileType (hFile=0x238) returned 0x1 [0266.355] WriteFile (in: hFile=0x238, lpBuffer=0x27f1660*, nNumberOfBytesToWrite=0x50df, lpNumberOfBytesWritten=0x1add58, lpOverlapped=0x0 | out: lpBuffer=0x27f1660*, lpNumberOfBytesWritten=0x1add58*=0x50df, lpOverlapped=0x0) returned 1 [0266.356] CloseHandle (hObject=0x238) returned 1 [0266.356] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", nBufferLength=0x105, lpBuffer=0x1ad690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information", lpFilePart=0x0) returned 0x5e [0266.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb70) returned 1 [0266.356] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\UniqueKEYFor5p5NrGJn0jS HALPmcxz.EnyBenied.Information" (normalized: "c:\\users\\all users\\microsoft\\assistance\\uniquekeyfor5p5nrgjn0js halpmcxz.enybenied.information"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x238 [0266.357] GetFileType (hFile=0x238) returned 0x1 [0266.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adae0) returned 1 [0266.357] GetFileType (hFile=0x238) returned 0x1 [0266.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0266.358] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0266.358] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x24 [0266.358] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0266.358] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.358] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.359] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.359] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.359] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.359] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.359] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.359] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0266.359] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0266.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0266.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0266.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1add30) returned 1 [0266.360] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x1ad820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0266.360] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x1ad7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x24 [0266.360] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x1ad9d0 | out: lpFindFileData=0x1ad9d0) returned 0x2dfdc0 [0266.360] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.360] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.360] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.360] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.361] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.361] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.361] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 1 [0266.361] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ada20 | out: lpFindFileData=0x1ada20) returned 0 [0266.361] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0266.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc80) returned 1 [0266.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc40) returned 1 [0266.362] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x39 [0266.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0266.362] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\microsoft\\crypto\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0266.363] GetFileType (hFile=0x238) returned 0x1 [0266.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0266.363] GetFileType (hFile=0x238) returned 0x1 [0266.871] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0266.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adbd0) returned 1 [0266.871] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\crypto\\enybeny.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x228 [0266.872] GetFileType (hFile=0x228) returned 0x1 [0266.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adb40) returned 1 [0266.872] GetFileType (hFile=0x228) returned 0x1 [0266.872] ReadFile (in: hFile=0x228, lpBuffer=0x273feb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x273feb0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0266.879] ReadFile (in: hFile=0x228, lpBuffer=0x273feb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x273feb0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0266.879] ReadFile (in: hFile=0x228, lpBuffer=0x273feb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x273feb0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0266.879] ReadFile (in: hFile=0x228, lpBuffer=0x273feb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x273feb0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0266.879] ReadFile (in: hFile=0x228, lpBuffer=0x273feb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x273feb0*, lpNumberOfBytesRead=0x1add08*=0x1000, lpOverlapped=0x0) returned 1 [0266.880] ReadFile (in: hFile=0x228, lpBuffer=0x273feb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x273feb0*, lpNumberOfBytesRead=0x1add08*=0xdf, lpOverlapped=0x0) returned 1 [0266.880] ReadFile (in: hFile=0x228, lpBuffer=0x273feb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1add08, lpOverlapped=0x0 | out: lpBuffer=0x273feb0*, lpNumberOfBytesRead=0x1add08*=0x0, lpOverlapped=0x0) returned 1 [0266.880] CloseHandle (hObject=0x228) returned 1 [0266.880] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png", nBufferLength=0x105, lpBuffer=0x1ad800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png", lpFilePart=0x0) returned 0x2f [0266.880] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\ENYBENY.png" (normalized: "c:\\users\\all users\\microsoft\\crypto\\enybeny.png")) returned 1 [0266.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0266.882] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0266.882] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x28 [0266.882] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0266.883] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.883] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.883] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.883] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.883] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.883] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0266.883] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0266.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0266.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0266.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adcb0) returned 1 [0266.884] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x1ad7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0266.884] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x1ad740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x28 [0266.884] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x1ad950 | out: lpFindFileData=0x1ad950) returned 0x2dfdc0 [0266.884] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.884] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.884] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x2dfdc0, lpFindFileData=0x1ad9a0 | out: lpFindFileData=0x1ad9a0) returned 0 [0266.885] FindClose (in: hFindFile=0x2dfdc0 | out: hFindFile=0x2dfdc0) returned 1 [0266.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adc00) returned 1 [0266.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adbc0) returned 1 [0266.886] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\ENYBENY.png.EnyBenied", nBufferLength=0x105, lpBuffer=0x1ad670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\ENYBENY.png.EnyBenied", lpFilePart=0x0) returned 0x3d [0266.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1adb50) returned 1 [0266.886] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\ENYBENY.png.EnyBenied" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\enybeny.png.enybenied"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x238 [0266.887] GetFileType (hFile=0x238) returned 0x1 [0266.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1adac0) returned 1 [0266.887] GetFileType (hFile=0x238) returned 0x1 Thread: id = 2 os_tid = 0x0 Thread: id = 3 os_tid = 0x520 Thread: id = 4 os_tid = 0x420 [0043.080] CoGetContextToken (in: pToken=0x1a81fa80 | out: pToken=0x1a81fa80) returned 0x800401f0 [0043.081] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.573] WriteFile (in: hFile=0x158, lpBuffer=0x25e3c60*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1a81f868, lpOverlapped=0x0 | out: lpBuffer=0x25e3c60*, lpNumberOfBytesWritten=0x1a81f868*=0x20, lpOverlapped=0x0) returned 1 [0099.574] CloseHandle (hObject=0x158) returned 1 [0099.575] WriteFile (in: hFile=0x244, lpBuffer=0x25e6028*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1a81f868, lpOverlapped=0x0 | out: lpBuffer=0x25e6028*, lpNumberOfBytesWritten=0x1a81f868*=0x20, lpOverlapped=0x0) returned 1 [0099.576] CloseHandle (hObject=0x244) returned 1 [0099.576] WriteFile (in: hFile=0x240, lpBuffer=0x25e4e48*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1a81f868, lpOverlapped=0x0 | out: lpBuffer=0x25e4e48*, lpNumberOfBytesWritten=0x1a81f868*=0x20, lpOverlapped=0x0) returned 1 [0099.577] CloseHandle (hObject=0x240) returned 1 [0161.017] WriteFile (in: hFile=0x23c, lpBuffer=0x25ea9d0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1a81f868, lpOverlapped=0x0 | out: lpBuffer=0x25ea9d0*, lpNumberOfBytesWritten=0x1a81f868*=0x20, lpOverlapped=0x0) returned 1 [0161.018] CloseHandle (hObject=0x23c) returned 1 [0169.504] WriteFile (in: hFile=0x228, lpBuffer=0x25dbb08*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1a81f868, lpOverlapped=0x0 | out: lpBuffer=0x25dbb08*, lpNumberOfBytesWritten=0x1a81f868*=0x20, lpOverlapped=0x0) returned 1 [0169.505] CloseHandle (hObject=0x228) returned 1 Thread: id = 5 os_tid = 0x690 Thread: id = 6 os_tid = 0x7c4 Thread: id = 7 os_tid = 0x324 Thread: id = 8 os_tid = 0x518 Thread: id = 9 os_tid = 0x510